1160 commits

Author	SHA1	Message	Date
Alexandre Dulaunoy	243a6280e0	Merge pull request #350 from bartblaze/master ... Add more info on Lotus Blossom	2019-02-21 23:39:33 +01:00
Bart	06553bbec2	Add more info on Lotus Blossom ... Add 2 more references, fix typo - Trend calls it "Esile", not "Eslie" as mistakenly stated by CFR. The backdoor itself is commonly referred to as Elise.	2019-02-21 22:31:14 +00:00
Alexandre Dulaunoy	08e8aafcf7	chg: [cert-eu-govsector] version fixed	2019-02-21 07:19:04 +01:00
Alexandre Dulaunoy	ed132cb1b8	chg: [threat-actor] version fixed	2019-02-21 07:18:16 +01:00
Daniel Plohmann	0cd79994cc	Two more actor names from GTR2019 ... I found two more actor names while going again over the crowdstrike's report and updating the cross-references to malpedia.	2019-02-19 22:38:11 +01:00
Daniel Plohmann	85ec27b4c4	Added missing actors from CrowdStrike GTR2019	2019-02-19 18:26:01 +01:00
Itay Cohen	7d9dc1ec9d	Fix 404'd reference of BuhTrap	2019-02-17 11:33:11 +02:00
Alexandre Dulaunoy	9ad8a76a38	chg: [ransomware] no related object in meta	2019-02-15 10:30:20 +01:00
mokaddem	34042abe23	new: Added draft of the election guildelines galaxy	2019-02-15 08:44:33 +01:00
Deborah Servili	5bf18ffd23	Merge branch 'master' into master	2019-02-14 16:29:04 +01:00
Deborah Servili	9c450a80d4	add Gallmaker and other clusters	2019-02-14 16:04:54 +01:00
Deborah Servili	2794a20589	add OSX/Shlayer and some refs	2019-02-14 12:42:28 +01:00
Alexandre Dulaunoy	ad0ef66b0a	chg: [tool] jq jq jq jq jq jq jq jq	2019-02-12 21:41:33 +01:00
Thomas Dupuy	95a70d09a5	add ANEL/UPPERCUT in tool cluster	2019-02-12 12:19:23 -05:00
Deborah Servili	8aeed60a24	Add Siesta campaign	2019-02-11 16:30:46 +01:00
João Neto	662cc5a012	Updated "Iran" name ... This extra space leads to an unnecessary key error when parsing the json file	2019-02-08 16:50:22 +01:00
Nils Kuhnert	fc16f4f69c	Added Velvet Chollima as synonym to Kimsuki	2019-02-08 08:50:05 +01:00
Christophe Vandeplas	e5f74c8fdc	Merge pull request #336 from 3c7/synonym/static-kitten ... Added static kitten as synonym for MuddyWater	2019-02-07 08:54:49 +01:00
Alexandre Dulaunoy	2bbb8a6a43	Merge pull request #334 from 3c7/synonym/cobalt-spider ... Added Cobalt Spider as Synonym for Cobalt	2019-02-07 08:53:19 +01:00
Nils Kuhnert	9778bea81e	Added Cobalt Spider reference	2019-02-07 08:41:00 +01:00
Nils Kuhnert	523a52c4db	Added static kitten as synonym for MuddyWater	2019-02-07 08:38:52 +01:00
Nils Kuhnert	0049acd81c	Added Turbine Panda as synonym for APT 26	2019-02-07 08:28:48 +01:00
Nils Kuhnert	5a077cf838	Added Cobalt Spider as Synonym for Cobalt	2019-02-07 08:26:10 +01:00
Nils Kuhnert	a171d5aa9d	Added Ocean Buffalo synonym for Ocean Lotus	2019-02-03 21:36:21 +01:00
Alexandre Dulaunoy	b9f1317941	Merge pull request #332 from Delta-Sierra/master ... Add APT39 & LockerGoga	2019-02-01 18:36:12 +01:00
Nils Kuhnert	0b04046d91	Added Quilted Tiger as Synonym for Patchwork/Dropping Elephant.	2019-02-01 13:17:43 +01:00
Deborah Servili	233b7f3aff	add APT39	2019-01-31 18:48:19 +01:00
Deborah Servili	b4751d396a	add LockerGoga ransomware	2019-01-30 12:07:19 +01:00
Nils Kuhnert	d45a32e9e2	Added Shadow Crane as synonym for Dark Hotel.	2019-01-30 08:22:46 +01:00
Nils Kuhnert	42ecbd801c	Added "Stardust Chollima" as synonym for Lazarus.	2019-01-29 08:36:12 +01:00
Alexandre Dulaunoy	898bdaf7f8	Merge pull request #328 from Delta-Sierra/master ... add Silence Group	2019-01-25 16:43:08 +01:00
Deborah Servili	c11a31b12a	add Silence Group	2019-01-25 16:19:51 +01:00
Thomas Dupuy	d38fb407ec	add alternative name for DarkHydrus	2019-01-21 23:14:34 -05:00
Deborah Servili	45ed56cd61	add LoJax ref	2019-01-17 10:49:23 +01:00
Deborah Servili	3bdbd6646b	add Cold River Threat actor	2019-01-17 09:44:09 +01:00
Deborah Servili	5d61a75886	fix versions	2019-01-14 16:34:28 +01:00
Deborah Servili	61093f6f07	add several ransomware and threat actors	2019-01-14 16:28:15 +01:00
Deborah Servili	90d2bf7bc1	add drakhydrus ref	2019-01-11 10:17:07 +01:00
Deborah Servili	cddfd5fcd1	TA505 threat actorand affiliates malwares	2019-01-11 09:53:08 +01:00
Deborah Servili	4547b09f49	add hidenad synonym	2019-01-10 11:53:30 +01:00
Deborah Servili	a10a417b0a	add Cryptomix variants refs	2019-01-10 10:03:22 +01:00
Deborah Servili	d3ae9e1e14	update version	2019-01-09 15:54:09 +01:00
Deborah Servili	90e3602db6	add AndroidOS_HidenAd	2019-01-09 15:33:34 +01:00
Deborah Servili	cc0bd96527	Merge branch 'master' of https://github.com/MISP/misp-galaxy	2019-01-09 14:54:33 +01:00
Christophe Vandeplas	0ba220987d	chg: [mitre] bump to latest MITRE ATT&CK dataset	2018-12-29 18:40:21 +01:00
Christophe Vandeplas	50c817a1fd	MITRE galaxy regeneration + updated migration script	2018-12-29 18:14:47 +01:00
Nils Kuhnert	1e4ebdd560	Added OilRig synonym "Helix Kitten".	2018-12-27 09:10:21 +01:00
Kafeine	5766cd68f8	zTDS	2018-12-22 11:51:40 +01:00
Kafeine	ce94cb8458	novidade,taurus	2018-12-22 10:19:52 +01:00
Deborah Servili	91b8da1e9e	add ransomwares	2018-12-20 00:37:49 +01:00
Alexandre Dulaunoy	de66295539	Merge pull request #316 from danielplohmann/master ... New name SNAKEMACKEREL for APT28 by Accenture	2018-12-19 14:06:38 +01:00
Gerard Wagener	7b347017e2	Removed Puplishing industry	2018-12-19 11:45:31 +01:00
Daniel Plohmann	cc22da1200	Microsoft alias for apt29 is YTTRIUM	2018-12-19 11:28:44 +01:00
Daniel Plohmann	c9e15b0c08	new name SNAKEMACKEREL for APT28 by Accenture	2018-12-19 10:46:58 +01:00
Alexandre Dulaunoy	27f6b19570	Merge pull request #315 from Delta-Sierra/master ... add OSX malwares	2018-12-18 17:43:34 +01:00
Deborah Servili	e6fa06f178	add OSX malwares	2018-12-18 16:26:49 +01:00
Alexandre Dulaunoy	a04790ac41	chg: [malpedia] updated to the latest version ... Ref: https://malpedia.caad.fkie.fraunhofer.de/api/get/misp	2018-12-14 19:00:18 +01:00
Deborah Servili	cb4345adf9	add operation sharpshooter	2018-12-13 13:47:54 +01:00
Deborah Servili	a9265d9858	update toll version	2018-12-13 09:44:09 +01:00
Deborah Servili	9f29f297d2	add shamoon synonym	2018-12-13 09:43:20 +01:00
Deborah Servili	3a2ac48faa	fix tool version	2018-12-12 15:39:34 +01:00
Deborah Servili	3ef58f7b21	fix exploit-kit version	2018-12-12 15:38:39 +01:00
Deborah Servili	70d68a312c	add some clusters or info	2018-12-12 15:26:54 +01:00
Deborah Servili	169d69871a	add Goden Chickens and affiliates	2018-12-12 13:52:55 +01:00
Deborah Servili	3183a4d1ff	add ransomwares	2018-12-12 09:27:27 +01:00
Christophe Vandeplas	1a65dfb9f4	chg: [mitre] re-generated galaxies and values using the MITRE sources ... and also using the MISP version to keep manually created relationships and such	2018-12-09 09:16:03 +01:00
Christophe Vandeplas	39ff6b4bbc	MITRE sorted ... While dicts were sorted, lists were not yet sorted. This current sort algo is not yet the best, but is a good start. A good sort is needed for better comparison afterwards with automated tools. In a next stage tt will also be needed in the validate_all scripts.	2018-12-09 08:32:48 +01:00
Deborah Servili	bf77e1125a	add Operation Poison Needles	2018-12-07 16:32:09 +01:00
Deborah Servili	79828d7411	add clusters	2018-12-07 13:25:56 +01:00
Deborah Servili	5a725e71ef	add several clusters	2018-12-06 16:13:51 +01:00
Alexandre Dulaunoy	ac2b5dbe05	fix: [ransomware] more duplicates removed	2018-12-02 12:00:17 +01:00
Alexandre Dulaunoy	2e8f139daa	fix: [ransomware] removed duplicate values	2018-12-02 11:54:34 +01:00
Deborah Servili	be9b4ff40f	add DNSpionage cluster	2018-11-29 16:38:06 +01:00
Deborah Servili	ef54489ea9	add everbe rasomnotes	2018-11-29 15:33:39 +01:00
Deborah Servili	6382857ee3	add ransomwares	2018-11-29 15:23:57 +01:00
Deborah Servili	c81f128d98	add ransomwares	2018-11-27 15:59:26 +01:00
Deborah Servili	6f255c0999	add Aurora Ransomware metadata	2018-11-26 09:30:54 +01:00
Deborah Servili	e5487305f1	add Aurora Ransomware synonym	2018-11-26 08:33:11 +01:00
Deborah Servili	9f5e10abf6	fix version	2018-11-23 16:16:58 +01:00
Deborah Servili	b6b1c7171a	Add Rotexy	2018-11-23 16:15:48 +01:00
Deborah Servili	dac1c08491	update version	2018-11-23 12:42:41 +01:00
Deborah Servili	b50c8bd805	add PNG Dropper	2018-11-23 10:38:36 +01:00
Deborah Servili	1be4a1cedb	add reference for Emotet/Geodo	2018-11-22 09:00:43 +01:00
Deborah Servili	2bf5d46cc4	Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy	2018-11-22 08:59:53 +01:00
Deborah Servili	2f5031b845	add several references for Emotet and others	2018-11-22 08:37:45 +01:00
Deborah Servili	de38e7249c	Merge branch 'master' into master	2018-11-19 15:23:45 +01:00
Deborah Servili	ce61b2d2dd	update oilrig related clusters + others	2018-11-19 14:56:13 +01:00
Alexandre Dulaunoy	eec7693081	chg: uuid fixed	2018-11-18 06:31:04 +01:00
Alexandre Dulaunoy	d324a1c39b	Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy into Delta-Sierra-master	2018-11-18 06:29:50 +01:00
Deborah Servili	eb6f6a3f49	fix rat galaxy version	2018-11-16 16:40:23 +01:00
Deborah Servili	77b556d702	jq and add ref in tool galaxy -hit version 100-	2018-11-16 13:11:55 +01:00
Deborah Servili	faa16879da	add TheOneSpy	2018-11-16 13:10:21 +01:00
Alexandre Dulaunoy	c9fd60d14b	chg: [threat-actor] INDRIK SPIDER added	2018-11-14 20:46:06 +01:00
Deborah Servili	ca33f1c2ce	Merge branch 'master' of https://github.com/MISP/misp-galaxy	2018-11-13 15:25:34 +01:00
Deborah Servili	f55277b682	add several rqansomware and HookAds campaign	2018-11-13 12:20:37 +01:00
Alexandre Dulaunoy	a505995b79	fix: [ransomware] duplicate removed	2018-11-13 07:12:36 +01:00
Alexandre Dulaunoy	51d3af11fc	chg: [ransomware] duplicate removed	2018-11-13 07:08:49 +01:00
Alexandre Dulaunoy	a4c916c916	Merge branch 'master' of github.com:MISP/misp-galaxy	2018-11-13 07:01:56 +01:00
Benoit Sevens	8f8c69134e	Update threat-actor.json ... Add LuckyMouse link	2018-11-12 13:12:14 +01:00
Deborah Servili	46dba06e40	add/update ransomawares	2018-11-09 16:34:00 +01:00
Deborah Servili	14444e4321	add several tools and refs	2018-11-08 10:39:32 +01:00
Daniel Plohmann	1f6b606f75	added APT38 as (FireEye) alias for Lazarus ... cross-references in https://content.fireeye.com/apt/rpt-apt38 suggest the link to Lazarus.	2018-11-07 17:19:50 +01:00
Deborah Servili	954264c084	Merge pull request #296 from Delta-Sierra/master ... update ransomware galaxy	2018-11-07 09:19:23 +01:00
Deborah Servili	d41a279c73	update ransomware galaxy	2018-11-05 16:23:10 +01:00
Alexandre Dulaunoy	8ae3214cd1	Merge pull request #295 from Delta-Sierra/master ... update Red Alert 2 Android Banking Trojan	2018-11-05 12:37:29 +01:00
Deborah Servili	050a94a2c0	jq fix	2018-11-05 11:01:57 +01:00
Deborah Servili	ae24b71f45	update version	2018-11-05 10:45:54 +01:00
Deborah Servili	5fd4cfa4ee	update Red Alert 2 Android Banking Trojan	2018-11-05 09:50:10 +01:00
Deborah Servili	7813a29460	Merge pull request #294 from Delta-Sierra/master ... add ransomwares	2018-10-31 16:05:18 +01:00
Deborah Servili	ad07b70a03	add ransomwares	2018-10-31 14:52:40 +01:00
Alexandre Dulaunoy	2465235817	Merge pull request #293 from Delta-Sierra/master ... add Operation EvilTraffic	2018-10-30 21:02:59 +01:00
Deborah Servili	e6b1eec329	add Chalubo botnet (+ jqallthethings)	2018-10-30 14:39:13 +01:00
Deborah Servili	41942d0daf	add Operation EvilTraffic	2018-10-30 13:28:46 +01:00
Deborah Servili	74ff4b957a	add Operation EvilTraffic	2018-10-30 13:28:27 +01:00
Nils Kuhnert	bc0bf1ca9f	Corrected DarkHotel threat actor entry	2018-10-29 09:03:30 +01:00
Deborah Servili	6e8abc0712	fix duplicate ref	2018-10-23 15:37:51 +02:00
Deborah Servili	af6020077e	add August Stealer	2018-10-23 15:25:37 +02:00
Deborah Servili	4a54044de6	add NukeSped reference	2018-10-22 14:50:57 +02:00
Deborah Servili	32d90a27e1	add GhostMiner	2018-10-22 14:46:44 +02:00
Deborah Servili	bd68ee280e	Merge branch 'master' of https://github.com/MISP/misp-galaxy	2018-10-22 11:09:37 +02:00
Deborah Servili	504570a298	add tools from https://github.com/misterch0c/shadowbroker	2018-10-22 11:06:25 +02:00
Deborah Servili	4564c5eb37	add DarkPulsar and affiliates + update some refs	2018-10-22 10:14:30 +02:00
Christophe Vandeplas	4232f0b737	chg: further categorization of galaxies	2018-10-19 14:15:20 +02:00
Christophe Vandeplas	9dddc4427c	jq	2018-10-19 10:23:09 +02:00
Christophe Vandeplas	6a9a9b7e1b	Merge remote-tracking branch 'MISP/master'	2018-10-19 10:18:45 +02:00
Christophe Vandeplas	ddccac58c8	chg: categorization of galaxies ... This allows relationships to be created.	2018-10-19 10:18:14 +02:00
Alexandre Dulaunoy	0ecf34f06e	fix: [malpedia] version	2018-10-18 11:23:48 +02:00
Alexandre Dulaunoy	83c6e6bef1	fix: [malpedia] broken reference has been fixed	2018-10-18 11:17:19 +02:00
Alexandre Dulaunoy	3771c21218	Merge pull request #287 from cvandeplas/master ... fixes an important bug in the gen_relations	2018-10-18 11:15:17 +02:00
Andras Iklody	66ded6d935	Some minor fixes	2018-10-17 20:59:08 +02:00
Christophe Vandeplas	ccebd86eed	fix: add missing relations from commit 78c1f07359	2018-10-17 19:18:16 +02:00
Christophe Vandeplas	2b24efb14a	fix: add missing relations from commit b857be9cab	2018-10-17 19:15:57 +02:00
Christophe Vandeplas	76b1429f10	fix: add missing relations from commit a81bbe288f	2018-10-17 19:13:35 +02:00
Christophe Vandeplas	84af053761	fix: add missing relations from commit 29beb01dc3	2018-10-17 19:07:01 +02:00
Christophe Vandeplas	873bc873b4	Merge remote-tracking branch 'MISP/master'	2018-10-17 18:28:44 +02:00
Christophe Vandeplas	1e90cac717	fix: intrusion is an actor and not a tool	2018-10-17 18:17:33 +02:00
Alexandre Dulaunoy	9129724343	Merge pull request #286 from Delta-Sierra/master ... Several clusters, refs, others.	2018-10-17 17:32:45 +02:00
Deborah Servili	c8cbb609a2	add GreyEnergy	2018-10-17 16:05:51 +02:00
Christophe Vandeplas	ca6c1caa8f	fix: jq all the things	2018-10-17 08:26:45 +02:00
Christophe Vandeplas	2bb4df134b	chg: removal of older unused relationships	2018-10-17 08:20:12 +02:00
Christophe Vandeplas	c51ba2e868	chg: MITRE relationships included in the respective cluster.	2018-10-17 08:08:58 +02:00
Deborah Servili	2ea560f9a7	add refs & synonyms	2018-10-15 12:02:21 +02:00
Deborah Servili	c134035a6d	add several refs	2018-10-15 11:33:37 +02:00
Deborah Servili	8d0c87c830	add several refs	2018-10-15 11:28:01 +02:00
Deborah Servili	11a27df82d	add roaming mantis group	2018-10-12 15:50:52 +02:00
Deborah Servili	b3109f6aea	Merge branch 'master' of https://github.com/MISP/misp-galaxy	2018-10-12 13:55:01 +02:00
Christophe Vandeplas	f26a4f2806	fix: minor newline difference after jq_all_the	2018-10-12 12:31:29 +02:00
Christophe Vandeplas	f14d616e22	chg: magical mapping with malpedia	2018-10-12 11:00:00 +02:00
Christophe Vandeplas	65eb66a739	fix: automatically fix missing uuids	2018-10-12 10:55:24 +02:00
Christophe Vandeplas	2fbd8ce485	jq sort keys ... Allows automation to edit the files	2018-10-12 10:35:31 +02:00
Alexandre Dulaunoy	4ff2a45cbb	chg: [malpedia] duplicate urls removed	2018-10-10 22:18:32 +02:00
Alexandre Dulaunoy	2d2749ccea	jq all the things	2018-10-10 22:12:59 +02:00
Steffen Enders	125f676d17	Updated malpedia.json to the current state ... Fetched the new malpedia galaxy cluster from https://malpedia.caad.fkie.fraunhofer.de/api/get/misp - this includes an additional ~120 new families.	2018-10-10 17:31:27 +02:00
Deborah Servili	4c367737ac	add magecart ref	2018-10-10 14:52:16 +02:00
Deborah Servili	ec6b04cf6a	add SAVEfiles ransomware	2018-10-10 14:05:24 +02:00
Deborah Servili	ed5aa150a7	update version	2018-10-09 11:35:17 +02:00
Deborah Servili	510a37084c	update matrix ransomware	2018-10-08 16:26:58 +02:00
Deborah Servili	5fb9db8282	add Triout Android Malware	2018-10-05 16:21:01 +02:00
Deborah Servili	655b1619e4	Merge branch 'master' of https://github.com/MISP/misp-galaxy	2018-10-05 16:06:25 +02:00
Deborah Servili	58a86e4e26	fix failed copy-paste	2018-10-05 15:53:03 +02:00
Alexandre Dulaunoy	8149960aa3	Merge pull request #276 from Delta-Sierra/master ... add CoalaBot + Kraken Cryptor Ransmware + refs	2018-10-05 15:52:04 +02:00
Davide Arcuri	253fbed356	Added Malpedia Galaxy ... based on malpedia git repo Co-Authored-By: garanews <garanews@users.noreply.github.com>	2018-10-05 14:30:31 +02:00
Deborah Servili	80bf2f5556	jq	2018-10-05 12:04:13 +02:00
Deborah Servili	06c4869125	add CoalaBot + Kraken Cryptor Ransmware + refs	2018-10-05 11:09:54 +02:00
Deborah Servili	9225666b92	add CoalaBot + Kraken Cryptor Ransmware + refs	2018-10-05 11:09:45 +02:00
Alexandre Dulaunoy	ecba2dbdbf	Merge pull request #274 from Delta-Sierra/master ... Refs updates	2018-10-04 17:24:57 +02:00
Deborah Servili	7cf37a57f1	add Persirai botnet	2018-10-04 14:17:16 +02:00
Deborah Servili	50fecccf39	update Torii botnet	2018-10-04 13:44:32 +02:00
Deborah Servili	138a4e6f9e	add ref for Torii botnet	2018-10-04 13:41:27 +02:00
Deborah Servili	b45b4ce0b1	add refs	2018-10-04 12:01:26 +02:00
Alexandre Dulaunoy	276992f180	Merge pull request #273 from Delta-Sierra/master ... update synonyms & attributions	2018-10-04 11:17:19 +02:00
Deborah Servili	2893d715d6	Add ZEBROCY tool	2018-10-04 10:52:40 +02:00
Deborah Servili	5bcf34a953	update regarding https://twitter.com/adulau/status/1047764090410737664	2018-10-04 10:28:22 +02:00
Deborah Servili	c78416eee1	update synonyms & attributions	2018-10-04 10:09:34 +02:00
Deborah Servili	123099cd6d	Merge pull request #272 from Delta-Sierra/master ... New clusters based on CIG Circular 66 – FASTCash ATM Cash Out Campaign	2018-10-03 16:38:33 +02:00
Deborah Servili	4d68b1c205	add NukeSped	2018-10-03 16:28:50 +02:00
Deborah Servili	3dfe8a5a34	add FASTCash	2018-10-03 15:09:14 +02:00
Alexandre Dulaunoy	63b777fc9e	Merge pull request #271 from Delta-Sierra/master ... Several updates	2018-10-01 21:51:11 +02:00
Deborah Servili	403f162451	add ref for magecart	2018-10-01 11:54:07 +02:00
Deborah Servili	35582f7ed5	new threat actors & tools	2018-10-01 11:52:40 +02:00
Alexandre Dulaunoy	2402c7d98f	chg: [tool] NOKKI added ... ref: https://researchcenter.paloaltonetworks.com/2018/09/unit42-new-konni-malware-attacking-eurasia-southeast-asia/	2018-09-29 09:01:47 +02:00
Deborah Servili	3649e03ad5	Merge branch 'master' of https://github.com/MISP/misp-galaxy	2018-09-28 16:28:16 +02:00
Deborah Servili	f828c8f79e	add synonym	2018-09-28 16:18:54 +02:00
Deborah Servili	a27534cfa1	add refs	2018-09-28 15:40:00 +02:00
Alexandre Dulaunoy	49fe210812	Merge pull request #270 from Delta-Sierra/master ... new clusters, relations and information	2018-09-28 12:57:13 +02:00
Deborah Servili	97581d7185	jq	2018-09-28 11:20:38 +02:00
Deborah Servili	fbf21487cf	new clusters and informtion	2018-09-28 11:08:21 +02:00
Alexandre Dulaunoy	46eddf1874	chg: [botnet] Torii added	2018-09-27 15:43:49 +02:00
Deborah Servili	78c1f07359	new ransomware and relations	2018-09-27 15:42:20 +02:00
Nex	014aa325b7	Added missing country values	2018-09-26 23:05:46 +02:00
Deborah Servili	29beb01dc3	add relationships on Mirai	2018-09-24 16:06:36 +02:00
Deborah Servili	f7e10cb38d	add references	2018-09-24 14:58:21 +02:00
Deborah Servili	77897be97e	add BusyGasper android spyware	2018-09-24 12:12:41 +02:00
Deborah Servili	2bc8e1e719	add Cobalt Dickensthreat actor	2018-09-24 11:51:09 +02:00
Deborah Servili	69c5fc30e5	add remcos ref	2018-09-24 11:07:17 +02:00
Deborah Servili	5a1734f170	update version	2018-09-21 11:16:36 +02:00
Deborah Servili	3c7e367cbf	fix field mistake	2018-09-21 11:14:19 +02:00
Deborah Servili	1cee9d71e0	update Lazarus group cluster	2018-09-20 15:38:32 +02:00
Deborah Servili	6d43d52731	new unnamedthreat actor	2018-09-20 13:24:11 +02:00
Deborah Servili	d0864a6531	new threat actors	2018-09-20 12:10:20 +02:00
Deborah Servili	0a724bee3d	merge	2018-09-19 16:01:46 +02:00
Deborah Servili	3f22dbd17d	add notpetya and update jadeRAT	2018-09-19 15:06:43 +02:00
Deborah Servili	058f778e61	add references	2018-09-19 09:04:04 +02:00
Alexandre Dulaunoy	79146b9d10	fix: array in synonyms (MISP accepts it but not the schema ;-)	2018-09-19 07:35:35 +02:00
Alexandre Dulaunoy	6105522453	chg: [threat-actor] Iron Group added ... ref: https://www.intezer.com/iron-cybercrime-group-under-the-scope-2/	2018-09-19 07:08:16 +02:00
Alexandre Dulaunoy	4ae0ccd192	chg: [tool] Xbash added ... ref: https://researchcenter.paloaltonetworks.com/2018/09/unit42-xbash-combines-botnet-ransomware-coinmining-worm-targets-linux-windows/	2018-09-19 07:03:56 +02:00
Alexandre Dulaunoy	8238bd5eb1	Merge pull request #263 from botherder/bahamut ... Added Bahamut to threat actors list	2018-09-19 06:46:26 +02:00
Deborah Servili	fd960bfc1b	Add magentocore malware	2018-09-18 23:10:33 +02:00
Nex	f0383758fc	Added Bahamut to threat actors list	2018-09-18 11:27:32 +02:00
Alexandre Dulaunoy	fe60e58f5b	Merge pull request #262 from botherder/mythic-leopard ... Added additional name to C-Major	2018-09-18 11:25:58 +02:00
Nex	1e502a494e	Added additional name to C-Major	2018-09-18 11:18:42 +02:00
Nex	ee7f609397	Removed duplicates	2018-09-18 11:16:00 +02:00
Alexandre Dulaunoy	88c9d8d9f6	Merge pull request #259 from botherder/country-sync ... Synced country codes with suspected state sponsor	2018-09-17 18:18:00 +02:00
Nex	be0dd94c90	Synced country codes with suspected state sponsor	2018-09-17 16:26:14 +02:00
Nex	c2ea505459	Merged Transparent Tribe in C-Major	2018-09-17 16:11:18 +02:00
Deborah Servili	ff9409e164	add blacknurse logo	2018-09-13 12:42:01 +02:00
Deborah Servili	1dcf2e50a7	add blacknurse	2018-09-13 12:33:19 +02:00
Deborah Servili	17d3959445	add Crypt0saur ransomware	2018-09-13 11:34:57 +02:00
Deborah Servili	0843fdfb23	adding and updating clusters	2018-09-13 09:03:41 +02:00
Deborah Servili	039fc91bd6	add description for sigma ransomware	2018-09-12 14:27:09 +02:00
Deborah Servili	a73424139f	fix versions	2018-09-12 14:26:44 +02:00
Deborah Servili	f107563cad	add ref for operation Applejeus	2018-09-12 09:34:16 +02:00
Deborah Servili	cb5fa5e822	fix version	2018-09-10 14:21:14 +02:00
Deborah Servili	c92dc15937	add Operation AppleJeus	2018-09-10 14:13:09 +02:00
Deborah Servili	a81bbe288f	fix some relations	2018-09-10 12:27:40 +02:00
Deborah Servili	40d5cca20f	clusters	2018-09-07 16:03:40 +02:00
Deborah Servili	addda6c545	more clusters~	2018-09-05 16:39:33 +02:00
Deborah Servili	14024efbf1	add CamuBot Banker Trojan	2018-09-05 09:19:35 +02:00
Deborah Servili	5866b660c8	jq~	2018-09-05 08:29:08 +02:00
Deborah Servili	fb328b0ef4	add ransomwares	2018-09-05 08:20:24 +02:00
Deborah Servili	0a9e91766b	Merge branch 'master' of https://github.com/MISP/misp-galaxy	2018-09-04 10:18:07 +02:00
Deborah Servili	912e91a5f5	add ransomware	2018-09-04 09:43:58 +02:00
Alexandre Dulaunoy	0acc41131d	"jq all the thing (tm)"	2018-09-01 11:58:52 +02:00
Alexandre Dulaunoy	e55f91b7ac	Merge branch 'master' of https://github.com/Kafeine/misp-galaxy into Kafeine-master	2018-09-01 11:56:10 +02:00
Kafeine	ac94f367b1	+ Fallout	2018-09-01 10:07:46 +02:00
Kafeine	21cf5ec957	Hunter EK > Active	2018-08-30 22:47:00 +02:00
Kafeine	85130f264d	Adding Underminer EK	2018-08-30 17:27:59 +02:00
Kafeine	afa3fb4cfd	Status from Terror, Bingo and Astrum	2018-08-30 17:08:37 +02:00
Kafeine	67e9ef2719	Adapting to modification from Misp repository	2018-08-30 17:04:08 +02:00
Deborah Servili	f14dd27315	add cfr data	2018-08-27 15:29:16 +02:00
Deborah Servili	d1940b6a69	Update microsoft-activity-group.json version	2018-08-27 08:38:22 +02:00
Deborah Servili	9efca2fd79	more clusters ... Signed-off-by: Deborah Servili <deborah.servili@gmail.com>	2018-08-24 16:11:16 +02:00
Deborah Servili	c943d1c9d1	add APT28/STRONTIUM refs	2018-08-22 09:59:40 +02:00
Deborah Servili	afea4ca5e7	Merge branch 'master' of https://github.com/MISP/misp-galaxy	2018-08-22 09:03:26 +02:00
Alexandre Dulaunoy	f8c5640613	chg: [tool] biscuit biscvt tool BISKVIT ... ref: https://www.fortinet.com/blog/threat-research/russian-army-exhibition-decoy-leads-to-new-biskvit-malware.html	2018-08-21 10:48:47 +02:00
Alexandre Dulaunoy	cd76f19f52	chg: [threat-actor] APT-C-35 actor added ... ref: https://ti.360.net/blog/articles/latest-activity-of-apt-c-35/	2018-08-15 20:25:57 +02:00
Deborah Servili	3940964956	update Dharma Ransomware	2018-08-14 15:56:09 +02:00
Deborah Servili	d5f35d94dc	version update	2018-08-14 12:21:50 +02:00
Deborah Servili	f3c02ad195	merge black ruby duplicate (delete the newer)	2018-08-14 12:20:29 +02:00
Deborah Servili	31142b41ac	merge	2018-08-14 12:09:21 +02:00
Deborah Servili	a28c50203e	fix	2018-08-14 12:07:12 +02:00
Deborah Servili	2081dc1627	resolve merge confilct -I hope-	2018-08-14 12:06:42 +02:00
Deborah Servili	4e911b2c17	Merge branch 'master' into master	2018-08-14 11:43:59 +02:00
Deborah Servili	7829e0fab6	fix typo and missing uuid	2018-08-14 11:41:06 +02:00
Deborah Servili	a646a835fe	add Rosenbridge backdoor	2018-08-14 10:09:26 +02:00
Christophe Vandeplas	88162aa44e	chg: [mapping] Generated automatic mapping between clusters	2018-08-14 09:35:22 +02:00
Christophe Vandeplas	5478f0aa45	no change: dump files with sort_keys=True ... This is needed to keep better track of the changes when other tools load and save the json files.	2018-08-13 17:06:29 +02:00
Christophe Vandeplas	021107e597	fix: [threat-actor] added missing uuids	2018-08-13 17:00:40 +02:00
Deborah Servili	b100b0cedd	add KEYPASS ransomware	2018-08-13 15:50:09 +02:00
Deborah Servili	f1dcb05576	Merge pull request #246 from Delta-Sierra/master ... add Skygofree android spyware	2018-08-13 12:28:30 +02:00
Deborah Servili	56fe9eb63c	add Skygofree android spyware	2018-08-13 12:20:16 +02:00
Alexandre Dulaunoy	9059a85eed	chg: [tool] KEYMARBLE malware added ... ref: https://www.us-cert.gov/ncas/analysis-reports/AR18-221A	2018-08-11 16:14:39 +02:00
Deborah Servili	27805ca768	add tools used by SamSam	2018-08-09 15:55:36 +02:00
Deborah Servili	597e7bacb9	add ransomwares	2018-08-09 13:53:04 +02:00
Alexandre Dulaunoy	6620b5575a	fix: [threat-actor] related is an array of JSON objects	2018-08-09 07:53:42 +02:00
Alexandre Dulaunoy	1429b60555	chg: [threat-actor] jq document	2018-08-08 16:38:39 +02:00
Deborah Servili	ebc7287e14	update schema	2018-08-08 16:12:29 +02:00
Deborah Servili	33a300b773	tags is an array	2018-08-08 15:59:44 +02:00
Deborah Servili	b857be9cab	relationship system - v2	2018-08-08 15:51:22 +02:00
Deborah Servili	050a864be0	update some clusters and try to add a relationship system	2018-08-08 14:20:38 +02:00
Deborah Servili	84adb50f0f	add RedAlpha campaigns	2018-08-07 13:55:05 +02:00
Deborah Servili	b7de06ffcc	delete forgotten conflict marker	2018-08-06 08:49:44 +02:00
Deborah Servili	010df0a2b6	resolve merge conflict	2018-08-06 08:48:21 +02:00
Deborah Servili	def23775e5	resolve merge conflict	2018-08-06 08:45:03 +02:00
Nils Kuhnert	ab49b58b02	Added DarkHydrus	2018-08-06 08:33:34 +02:00
Nils Kuhnert	4654f51889	Two small typos	2018-08-05 15:09:38 +02:00
Deborah Servili	e5b185deee	Merge branch 'master' into master	2018-08-03 16:11:16 +02:00
Deborah Servili	35aa8ba34e	delete duplicate gorgon group	2018-08-03 16:08:43 +02:00
Deborah Servili	a9a71ef84c	more clusters	2018-08-03 15:58:54 +02:00
Alexandre Dulaunoy	b3701b6b34	chg: [threat-actor] The Gordon Group added ... ref: https://researchcenter.paloaltonetworks.com/2018/08/unit42-gorgon-group-slithering-nation-state-cybercrime/	2018-08-03 10:26:52 +02:00
Alexandre Dulaunoy	a0dfdd65ae	chg: [rat] Hallaj PRO Rat added ... ref: https://securelist.com/attacks-on-industrial-enterprises-using-rms-and-teamviewer/87104/ misp-event: 5b63f5e4-bf24-4f46-8340-48fc02de0b81	2018-08-03 08:34:55 +02:00
Alexandre Dulaunoy	3da005a3f3	fix: jq all the things(tm)	2018-08-02 15:15:47 +02:00
Alexandre Dulaunoy	1fdf47d509	fix: [threat-actor] synonyms are always arraus	2018-08-02 15:13:18 +02:00
Alexandre Dulaunoy	ece56dff38	chg: [threat-actor] leafminer - RASPITE added	2018-08-02 15:08:39 +02:00
Alexandre Dulaunoy	c232b3dd5a	chg: [tool] added based on Carbanak tooling description from Crowdstrike ... ref: https://www.crowdstrike.com/blog/arrests-put-new-focus-on-carbon-spider-adversary-group/	2018-08-02 10:30:47 +02:00
Alexandre Dulaunoy	43fa95df7a	chg: [threat-actor] new reference to CARBON SPIDER/Carbanak	2018-08-02 10:03:18 +02:00
Alexandre Dulaunoy	4cf84858e3	chg: [tool] Bisonal malware added (new variant with encryption capabilities)	2018-07-31 15:26:11 +02:00
Deborah Servili	e7d2541929	add Kronos Banking Trojan	2018-07-25 09:46:46 +02:00
Deborah Servili	381f7e4a19	Add CFR.org metadata into the galaxy - part 2	2018-07-25 09:08:16 +02:00
Deborah Servili	28456545be	Merge https://github.com/MISP/misp-galaxy	2018-07-16 09:16:13 +02:00
Alexandre Dulaunoy	98db303047	chg: [threat-actor] The Big Bang campaign/group added	2018-07-10 08:49:00 +02:00
Alexandre Dulaunoy	43a2c7f0ef	chg: [botnet] Xor DDoS added	2018-07-09 14:25:19 +02:00
raw-data	77cfaa8221	[add] new backdoor galaxy and cluster	2018-07-06 20:09:52 +01:00
Raphaël Vinot	e5939e3248	Merge branch 'master' of github.com:MISP/misp-galaxy	2018-07-06 15:25:09 +02:00
Raphaël Vinot	6f7a7921ae	new: Add entries from Bambenek Consulting	2018-07-06 15:25:05 +02:00
raw-data	fa8d0e35f6	[add] x1 new entry in stealer.json - AZORult	2018-07-06 11:00:11 +01:00
Deborah Servili	cae0f7e1ad	merging attempt	2018-06-29 16:39:34 +02:00
Deborah Servili	8c51ef98b3	add cfr related informations -still in progress-	2018-06-29 16:36:58 +02:00
Deborah Servili	fb6b01cc95	Merge branch 'master' into master	2018-06-27 09:39:28 +02:00
Deborah Servili	b1aac6b35b	cfr update -in progress + add clusters associated to RANCOR	2018-06-27 09:37:43 +02:00
Alexandre Dulaunoy	1bd0fb34d7	Merge pull request #233 from Delta-Sierra/master ... Add CFR.org metadata into the galaxy - Test	2018-06-26 14:26:18 +02:00
Deborah Servili	6f9e639981	add cfr prefix for cfr data - test	2018-06-26 10:07:14 +02:00
Deborah Servili	1cd6bddf0c	Add CFR.org metadata into the galaxy - Test	2018-06-26 09:40:13 +02:00
Deborah Servili	3838efb0bb	some updates	2018-06-26 09:26:32 +02:00
raw-data	f649af8ba5	[ADD] x1 new entry in tool.json - Koadic	2018-06-25 15:59:30 +01:00
raw-data	b3dffeb8d4	[ADD] x2 new rat - Sisfader, SocketPlayer	2018-06-25 15:46:42 +01:00
raw-data	0920d13c05	[ADD] banker.json version bump	2018-06-25 15:41:32 +01:00
raw-data	b382425d9c	[ADD] x2 new banker - Backswap, Karius	2018-06-25 15:14:56 +01:00
Nils Kuhnert	ed26cfb042	Updated APT1 report link	2018-06-22 13:49:05 +02:00
Deborah Servili	8ebde0540a	Update cert-eu-govsector.json	2018-06-22 12:50:32 +02:00
Deborah Servili	e088194ea9	fix typo in type	2018-06-22 12:45:39 +02:00
Andras Iklody	8e014674af	Fixed typo	2018-06-20 09:45:16 +02:00
Deborah Servili	dcda058944	update verion	2018-06-20 09:36:36 +02:00
Deborah Servili	e18fdf42da	add Thrip as threat actor	2018-06-20 09:30:15 +02:00
Deborah Servili	dcd159f8ed	add olympic destroyer	2018-06-19 15:26:40 +02:00
Deborah Servili	92cbd29091	add severals ransomware	2018-06-19 13:04:32 +02:00
Deborah Servili	cee83f677e	more clusters	2018-06-18 14:30:51 +02:00
Deborah Servili	d8c83cf2d6	add cluster in threat actor	2018-06-18 10:54:58 +02:00
Deborah Servili	ab577afacd	add ClipboardWalletHijacker	2018-06-18 09:47:03 +02:00
Deborah Servili	333db20791	add MysteryBot in android galaxy	2018-06-18 08:41:52 +02:00
Deborah Servili	397b37dcc8	add some ransomwares	2018-06-15 15:14:42 +02:00
Alexandre Dulaunoy	e6bae7165c	Merge pull request #224 from Delta-Sierra/master ... add some clusters	2018-06-13 12:43:35 +02:00
Deborah Servili	4ac23483b9	add some tools	2018-06-13 11:54:50 +02:00
Deborah Servili	cef7d02622	update version	2018-06-13 11:06:31 +02:00
Deborah Servili	c17a2aa7cc	add some clusters	2018-06-13 10:39:11 +02:00
Christophe Vandeplas	db81051154	minor layout corrections - validate_all	2018-06-12 11:03:09 +02:00
Christophe Vandeplas	d0d54b2751	merge pull request 222	2018-06-12 10:58:08 +02:00
Deborah Servili	508bb081c8	add BabaYaga Malware	2018-06-08 15:54:30 +02:00
Deborah Servili	2b447585b6	add PLEAD	2018-06-08 10:18:41 +02:00
Kafeine	25d21204fb	fix	2018-06-07 10:34:55 +01:00
Kafeine	52f0858ef5	+ Glazunov	2018-06-07 10:31:58 +01:00
Deborah Servili	a96a8a4a13	add sigrun ransomware's ransomnotes	2018-06-07 09:33:08 +02:00
Kafeine	178d5219c7	guuid & + VenomKit	2018-06-06 18:00:25 +01:00
Deborah Servili	e561e3e4f0	add Sigrun ransomwaremeta data	2018-06-06 16:29:24 +02:00
Deborah Servili	e2a25e165d	add Sigrun ransomware	2018-06-06 16:12:31 +02:00
Deborah Servili	07f91bcca4	add another cryptomix variant	2018-06-06 15:44:32 +02:00
Deborah Servili	3e91466aea	add Brambul worm	2018-06-06 15:07:30 +02:00
Deborah Servili	3e10d0957c	add Joanap RAT	2018-06-06 14:34:42 +02:00
Alexandre Dulaunoy	308774755c	add: Iron Backdoor	2018-06-03 18:39:37 +02:00
raw-data	388a2b25b3	[ADD] x2 new info/pwd stealers - Nocturnal Stealer, TeleGrab	2018-06-01 15:59:25 +01:00
raw-data	ba6892408b	[ADD] NavRAT	2018-06-01 15:09:22 +01:00
raw-data	42bb2175e2	[ADD] DanaBot	2018-06-01 15:08:55 +01:00
Alexandre Dulaunoy	6d5b8de216	Merge branch 'master' of github.com:MISP/misp-galaxy	2018-05-29 21:47:59 +02:00
Alexandre Dulaunoy	c08c6af936	chg: Stalker Panda description added	2018-05-29 21:47:04 +02:00
raw-data	8726e0542d	[ADD] VPNFilter in tool.json cluster	2018-05-26 23:49:59 +01:00
raw-data	b0396e5ea2	[ADD] Pontoeb, WICKED and Brain Food into botnet.json cluster	2018-05-24 16:39:24 +01:00
Raphaël Vinot	ca964d9d35	Merge branch 'master' of github.com:MISP/misp-galaxy	2018-05-19 17:58:23 -04:00
Raphaël Vinot	96f3bf1cb8	fix: Duplicate ELECTRUM entry ... Fix #212	2018-05-19 17:57:51 -04:00
Deborah Servili	22cb1618a5	Merge pull request #214 from Delta-Sierra/master ... update mitre galaxies - add external id and killchain	2018-05-19 13:21:18 +02:00
Deborah Servili	6c8edd3f61	jq	2018-05-19 13:09:50 +02:00