|
52a6fff6a2
|
Merge pull request #788 from Mathieu4141/threat-actors/fix-cobalt-dickens
[threat-actors] Remove cobalt dickens duplicate
|
2022-11-03 11:27:08 +01:00 |
|
|
3b4dcd6ad3
|
Merge pull request #787 from Mathieu4141/threat-actors/fix-subaat-duplicate
[threat-actors] Remove subaat duplicate
|
2022-11-03 11:26:21 +01:00 |
|
Mathieu Beligon
|
8a9dd47f8f
|
[threat-actors] Add Phosphorus in APT35 aliases
|
2022-11-02 23:49:22 -07:00 |
|
Mathieu Beligon
|
21d4292faf
|
[threat-actors] Remove DustStorm alias from APT10
|
2022-11-02 23:31:31 -07:00 |
|
Mathieu Beligon
|
9f0869097a
|
[threat-actors] Remove cobalt dickens duplicate
|
2022-11-02 18:09:42 -07:00 |
|
Mathieu Beligon
|
e3e5560e37
|
[threat-actors] Remove subaat duplicate
|
2022-11-02 17:57:47 -07:00 |
|
Mathieu Beligon
|
5801bbcfc1
|
[threat-actors] Remove Skeleton Spider duplicate
|
2022-11-02 17:38:07 -07:00 |
|
|
015650c6d7
|
chg: [mitre-attack] updated to version 12.0
|
2022-11-01 22:39:33 +01:00 |
|
Delta-Sierra
|
9952366667
|
add Prynt Stealer & variants
|
2022-10-14 16:03:45 +02:00 |
|
Delta-Sierra
|
355025eb5b
|
fix metadata in wrong slot
|
2022-10-04 13:28:42 +02:00 |
|
Delta-Sierra
|
e5b3062912
|
add Volatile Cedar synonym
|
2022-10-03 16:06:13 +02:00 |
|
Thomas Dupuy
|
4bcf80f01b
|
Add SharPyShell tool.
|
2022-10-02 22:00:54 +00:00 |
|
|
409c82f40c
|
Merge pull request #781 from Mathieu4141/threat-actors/fix-neodymium
[threat-actors] Fix G0055 (NEODYMIUM) alias
|
2022-09-30 06:39:31 +02:00 |
|
|
588184bacd
|
Merge pull request #780 from Mathieu4141/threat-actors/fix-svmondr
[threat-actors] Remove SVCMONDR duplicate
|
2022-09-30 06:38:56 +02:00 |
|
|
800006e6ab
|
Merge pull request #778 from Mathieu4141/threat-actors/fix-malware-reuser-duplicate
[threat-actors] Fix Volatile Cedar and Dancing Salome conflicts
|
2022-09-30 06:37:15 +02:00 |
|
Mathieu Beligon
|
74c6835d18
|
[threat-actors] Fix G0055 (NEODYMIUM) alias
|
2022-09-29 17:16:57 -07:00 |
|
Mathieu Beligon
|
a740e35687
|
[threat-actors] Remove SVCMONDR duplicate
|
2022-09-29 16:11:19 -07:00 |
|
Mathieu Beligon
|
5994fa4160
|
[threat-actors] Fix Volatile Cedar and Dancing Salome conflicts
|
2022-09-29 14:51:38 -07:00 |
|
Mathieu Beligon
|
4f47e6e2d3
|
[threat-actors] Equation group: separate from Lamberts and add tools
|
2022-09-29 11:28:54 -07:00 |
|
Thomas Dupuy
|
c66d6823a1
|
Add APT-Q-12 Threat Actor.
|
2022-09-29 02:30:41 +00:00 |
|
|
c3b65a2d15
|
chg: [threat-actor] JSON fix
|
2022-09-27 08:18:13 +02:00 |
|
|
067e449a41
|
Merge branch 'main' of https://github.com/nyx0/misp-galaxy into nyx0-main
|
2022-09-27 08:17:41 +02:00 |
|
Christophe Vandeplas
|
e259458d5a
|
chg: [mitre] bump to v11.3
|
2022-09-27 07:30:13 +02:00 |
|
Thomas Dupuy
|
bfd1812cef
|
Add Void Balaur.
|
2022-09-27 00:11:20 +00:00 |
|
|
eacab6ca27
|
new: [malpedia] remove duplicate UUIDs objects (coming from Malpedia API)
|
2022-09-26 10:58:09 +02:00 |
|
|
7cd322640f
|
Merge pull request #771 from Delta-Sierra/main
fetch malpedia
|
2022-09-26 10:07:24 +02:00 |
|
Delta-Sierra
|
a611230bef
|
fetch malpedia
|
2022-09-26 09:23:07 +02:00 |
|
Mathieu Beligon
|
22a39f4fdc
|
[threat-actors] Add BITWISE SPIDER
|
2022-09-20 11:23:33 -07:00 |
|
|
9b8b51fe53
|
Merge pull request #769 from Mathieu4141/threat-actors-add/no-name-057-06
[threat-actors] Add NoName057(16)
|
2022-09-17 07:43:42 +02:00 |
|
|
2f169e4258
|
Merge pull request #766 from Mathieu4141/threat-actors/fix-ta505
[threat-actors] Clean TA505 aliases
|
2022-09-17 07:43:18 +02:00 |
|
Mathieu Beligon
|
580d2c6931
|
[threat-actors] Add NoName057(16)
|
2022-09-16 20:11:06 -06:00 |
|
|
30cb4e7e60
|
Merge pull request #768 from Delta-Sierra/main
New clusters
|
2022-09-16 06:40:43 +02:00 |
|
Delta-Sierra
|
8202a7f48f
|
Add PlugX ref
|
2022-09-15 15:39:47 +02:00 |
|
Delta-Sierra
|
0903300b75
|
Add Chisel
|
2022-09-15 13:24:49 +02:00 |
|
Delta-Sierra
|
021fcd2c91
|
add Lorenz ransomware
|
2022-09-15 10:29:46 +02:00 |
|
|
1c8d82cfcc
|
new: [threat-actor] hezb added
|
2022-09-14 11:00:33 +02:00 |
|
Christophe Vandeplas
|
b011ddee5b
|
fix: [360net] fixes null entries in lists
|
2022-09-13 22:12:51 +02:00 |
|
Christophe Vandeplas
|
c5a5fa7cfa
|
chg: [360net] add 360.net APT list fixes #764
|
2022-09-13 21:48:16 +02:00 |
|
Mathieu Beligon
|
e1f5d3b5d8
|
[threat-actors] Keep meta from old Xenotime
|
2022-09-13 11:40:17 -07:00 |
|
Mathieu Beligon
|
4ff0bdfe8e
|
[threat-actors] Clean TA505 aliases
|
2022-09-13 11:34:02 -07:00 |
|
Delta-Sierra
|
e3d88f45c6
|
add Dark.IoT
|
2022-09-13 13:35:55 +02:00 |
|
Delta-Sierra
|
6dba3abe13
|
add hezb
|
2022-09-13 10:40:00 +02:00 |
|
Mathieu Beligon
|
273c7c9b97
|
[threat-actors] Remove Xenotime duplicate
|
2022-09-12 17:10:49 -07:00 |
|
Delta-Sierra
|
705d0d2e72
|
add BumbleBee backdoor
|
2022-09-12 10:51:43 +02:00 |
|
Delta-Sierra
|
0440db12e9
|
add DangerousSavanna campaign
|
2022-09-07 11:01:23 +02:00 |
|
Delta-Sierra
|
77db2370b1
|
Add Lockbit synonym
|
2022-09-07 11:00:41 +02:00 |
|
Delta-Sierra
|
775d3c183b
|
Add Lockbit synonym
|
2022-09-07 09:26:38 +02:00 |
|
Rony
|
aea413cebf
|
chg: [threat-actor] version bump
|
2022-09-01 10:32:01 +00:00 |
|
Rony
|
db913e5ab4
|
fix: [threat-actor] remove duplicate entries
|
2022-09-01 09:53:11 +00:00 |
|
Rony
|
6aea5ee05c
|
chg: [threat-actor] add Aoqin Dragon
|
2022-09-01 09:46:43 +00:00 |
|
Rony
|
fb0cf3c7e5
|
chg: [threat-actor] miscellaneous updates
|
2022-09-01 09:17:31 +00:00 |
|
Daniel Plohmann
|
d18f5bc8b6
|
mini-fix: adding https protocol to a reference
in automated processing and display, this may otherwise lead to a malformed local / relative link.
|
2022-08-30 17:08:03 +02:00 |
|
|
5175fb0364
|
Merge pull request #760 from Delta-Sierra/main
Add GootLoader & MOUSEISLAND in tool
|
2022-08-29 12:02:55 +02:00 |
|
Rony
|
e7178a1e08
|
fix: [threat-actor] remove duplicate entries from APT9
|
2022-08-27 12:54:32 +00:00 |
|
Rony
|
27300c6381
|
chg: [threat-actor] add avast blog to APT40
|
2022-08-27 12:41:31 +00:00 |
|
Rony
|
7f526e230b
|
chg: [threat-actor] add Microsoft and PwC report to actors' references
|
2022-08-27 12:34:36 +00:00 |
|
Rony
|
6ad9699a38
|
chg: [threat-actor] add recorded future reference to RedAlpha
|
2022-08-27 12:10:51 +00:00 |
|
Rony
|
2dc138ae01
|
chg: [threat-actor] add Adam Kozy's testimony ro APT41 and APT26
|
2022-08-27 12:08:11 +00:00 |
|
Rony
|
0b140b7097
|
chg: [threat-actor] miscellaneous updates including merge of some actors and fix the error committed in 9cfcc0d9ac
|
2022-08-27 11:58:03 +00:00 |
|
|
8bea9f3b4b
|
Merge pull request #755 from Mathieu4141/threat-actors/fix-winnti
[threat-actors] Fix Axiom/Winnti/Suckfly/APT41 conflicts
|
2022-08-27 08:25:20 +02:00 |
|
Mathieu Béligon
|
9cfcc0d9ac
|
Add aliases to APT41
Co-authored-by: Rony <rony_123@protonmail.ch>
|
2022-08-26 14:54:02 -07:00 |
|
Mathieu Beligon
|
6e00329ba6
|
[threat-actors] Fix aliases
|
2022-08-26 11:09:29 -07:00 |
|
Delta-Sierra
|
534dacb7fb
|
add GootLoader
|
2022-08-26 10:12:36 +02:00 |
|
Delta-Sierra
|
d5a9365aae
|
add MOUSEISLAND
|
2022-08-26 09:23:38 +02:00 |
|
Mathieu Beligon
|
9b714dcd76
|
[threat-actors] Merge Axiom into APT17
|
2022-08-25 13:49:07 -07:00 |
|
Delta-Sierra
|
5b3c395f10
|
jq
|
2022-08-24 14:27:33 +02:00 |
|
Delta-Sierra
|
cb422c2190
|
update Guildma
|
2022-08-24 14:07:01 +02:00 |
|
Yosirion95
|
cda80e5496
|
Add synonyms to sector.json
|
2022-08-21 11:09:50 +02:00 |
|
|
9efca4c41b
|
fix: [threat-actor] UUID reused fixed (UUIDs cannot be reused across different cluster)
Add the missing the relationship for the new UUID
|
2022-08-21 09:17:56 +02:00 |
|
Rony
|
5b42a09dc2
|
add PARINACOTA to threat-actor.json
MSTIC names digital crime actors based on global volcanoes
|
2022-08-20 17:10:15 +00:00 |
|
Rony
|
6fd584fa88
|
remove APT36/ Transpert Tribe from microsoft-activity-group.json cause we don't know any MSTIC name yet.
|
2022-08-20 17:06:18 +00:00 |
|
|
6b137ea12c
|
Merge pull request #749 from Mathieu4141/threat-actors/fix-naikon-cluster
[threat actors] Fix threat actors related to Lotus Panda
|
2022-08-20 11:46:15 +02:00 |
|
Mathieu Beligon
|
7f82616c10
|
fix axiom related field
|
2022-08-19 12:48:40 -07:00 |
|
Mathieu Beligon
|
969f461709
|
merge into apt41
|
2022-08-19 12:45:47 -07:00 |
|
Christophe Vandeplas
|
1b69b654a8
|
chg: [atrm] bump to latest ATRM version
|
2022-08-19 21:19:23 +02:00 |
|
Mathieu Beligon
|
fd9201e9e0
|
Merge APT22 and suckfly
|
2022-08-19 12:16:30 -07:00 |
|
Mathieu Beligon
|
768c94671c
|
Fix hellsing ref
|
2022-08-19 11:34:16 -07:00 |
|
|
a8b234d694
|
Merge pull request #753 from Mathieu4141/threat-actors/fix-bronze-president
[threat-actors] Remove duplicated BRONZE PRESIDENT entity
|
2022-08-19 06:26:11 +02:00 |
|
Mathieu Béligon
|
fcd6faec78
|
Capitalize override panda alias
Co-authored-by: Rony <rony_123@protonmail.ch>
|
2022-08-18 20:51:03 -07:00 |
|
Mathieu Béligon
|
54f3ef2831
|
capitalize lotus panda alias
Co-authored-by: Rony <rony_123@protonmail.ch>
|
2022-08-18 20:50:32 -07:00 |
|
Mathieu Béligon
|
c9b11553eb
|
normalize APT30 alias
Co-authored-by: Rony <rony_123@protonmail.ch>
|
2022-08-18 20:32:44 -07:00 |
|
Mathieu Beligon
|
c1abedb446
|
Move Lotus Panda alias to Lotus Blossom
|
2022-08-18 20:21:31 -07:00 |
|
Mathieu Beligon
|
a61ef2a88f
|
[threat-actors] Fix Axiom/Winnti/Suckfly/APT41 conflicts
|
2022-08-18 17:03:26 -07:00 |
|
Mathieu Beligon
|
84e69ad4be
|
Add DarkCommet as a tool of GoldenRAT
|
2022-08-18 15:47:04 -07:00 |
|
Mathieu Beligon
|
1acc51a7a6
|
[threat-actors] Add more data about APT-C-27
|
2022-08-18 15:44:18 -07:00 |
|
Mathieu Beligon
|
ec988c97d0
|
[threat-actors] Remove duplicated APT-C-27
|
2022-08-18 15:34:08 -07:00 |
|
Mathieu Beligon
|
d9046c8619
|
[threat-actors] Remove duplicated BRONZE PRESIDENT entity
|
2022-08-18 15:12:18 -07:00 |
|
Mathieu Beligon
|
a046e8094d
|
Merge APT30 and Naikon
|
2022-08-18 11:36:45 -07:00 |
|
Mathieu Beligon
|
5e4a4c3453
|
Merge branch 'main' into threat-actors/fix-naikon-cluster
|
2022-08-18 09:01:36 -07:00 |
|
Mathieu Beligon
|
264e764dfa
|
Remove ATK34 alias
|
2022-08-18 08:59:04 -07:00 |
|
Delta-Sierra
|
3f036db1e3
|
add TA558
|
2022-08-18 15:54:28 +02:00 |
|
Mathieu Beligon
|
71e3e1f3eb
|
Fix ATK aliases
|
2022-08-17 13:39:43 -07:00 |
|
Mathieu Beligon
|
a6242d4732
|
Merge branch 'main' into threat-actors/fix-naikon-cluster
|
2022-08-17 13:37:01 -07:00 |
|
Mathieu Beligon
|
0d6399aa2b
|
Add ATK78 alias for Thrip
|
2022-08-17 12:04:32 -07:00 |
|
Mathieu Beligon
|
53282255ce
|
Branch out Goblin Panda from Hellsing
|
2022-08-17 11:55:35 -07:00 |
|
Mathieu Beligon
|
3f50cf0175
|
Create a tool for Esile
|
2022-08-17 11:19:30 -07:00 |
|
Rony
|
f608312577
|
addresses https://github.com/MISP/misp-galaxy/pull/751#issuecomment-1217680586
|
2022-08-17 08:52:35 +00:00 |
|
Rony
|
ccd10b54f4
|
remove duplicate reference
|
2022-08-17 12:49:56 +05:30 |
|
Rony
|
0cec882cc5
|
merge microcin/sixlittlemonkeys to vicious panda
|
2022-08-17 07:06:51 +00:00 |
|
|
a373909bb1
|
Merge pull request #748 from r0ny123/patch-2
Update threat-actor.json
|
2022-08-17 07:44:46 +02:00 |
|