|
|
1dd3c2efdd
|
Merge pull request #828 from Mathieu4141/threat-actors/add-anonymous-suddan
[threat-actors] Add Anonymous Sudan
|
2023-03-16 08:42:16 +01:00 |
|
Mathieu Beligon
|
d82ff1ecfb
|
[threat-actors] Add Anonymous Sudan
|
2023-03-15 17:38:03 -05:00 |
|
|
|
1cadb52866
|
Merge pull request #827 from danielplohmann/patch-30
add sofacy alias to apt28
|
2023-03-15 22:56:32 +01:00 |
|
Daniel Plohmann
|
c39b46e9d5
|
Update threat-actor.json
when value "Sofacy" was changed to "APT28", it seems Sofacy was not added to aliases, so it's missing right now.
|
2023-03-15 14:55:25 +01:00 |
|
Delta-Sierra
|
74390b27c5
|
Merge https://github.com/MISP/misp-galaxy
|
2023-03-13 09:59:04 +01:00 |
|
Delta-Sierra
|
c4eca7dfe1
|
more from ransomlook
|
2023-03-13 09:59:00 +01:00 |
|
|
|
963a389216
|
Merge pull request #826 from jloehel/wasabi
[Proofpoint] [Campaign] Screentime
|
2023-03-09 06:37:13 +01:00 |
|
Jürgen Löhel
|
9f9a263394
|
chg [tool]: Add tools used by TA866 during the Screentime campaign
Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>
|
2023-03-08 21:46:11 -06:00 |
|
Jürgen Löhel
|
031a4c8030
|
chg [stealer]: Add Rhadamanthys
Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>
|
2023-03-08 21:45:39 -06:00 |
|
Jürgen Löhel
|
437d4a30e5
|
chg [tds]: Add 404 TDS
Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>
|
2023-03-08 21:45:13 -06:00 |
|
Jürgen Löhel
|
2d30785af5
|
chg [threat-actors] Add TA866
Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>
|
2023-03-08 21:44:16 -06:00 |
|
|
|
57f3e46273
|
chg: [sigma] updated
|
2023-03-07 12:14:48 +01:00 |
|
|
|
e7b97edaa4
|
chg: [ransomware] fixing duplicate cluster element Avaddon
|
2023-03-07 12:06:56 +01:00 |
|
|
|
6db5b0b0cb
|
Merge pull request #824 from Delta-Sierra/main
update based on ransomlook
|
2023-03-06 16:23:48 +01:00 |
|
Delta-Sierra
|
bed6bf8dd6
|
fix stupid duplicate-bis
|
2023-03-06 16:10:23 +01:00 |
|
Delta-Sierra
|
d561350f7b
|
fix stupid duplicate
|
2023-03-06 16:04:28 +01:00 |
|
Delta-Sierra
|
96cb1e22ba
|
update based on ransomlook
|
2023-03-06 15:55:46 +01:00 |
|
|
|
f5c43b843d
|
Merge pull request #823 from Mathieu4141/threat-actors/add-some-actors
Add a few threat actors and aliases
|
2023-03-03 10:01:03 +01:00 |
|
Mathieu Beligon
|
395ffda94f
|
[threat-actors] bump version
|
2023-03-02 10:29:52 -08:00 |
|
Mathieu Beligon
|
e1407c3c3f
|
[threat-actors] Add SLIPPY SPIDER alias to LAPSUS
|
2023-03-02 10:29:29 -08:00 |
|
Mathieu Beligon
|
4bbee8c1e7
|
[threat-actors] Add PROPHET SPIDER
|
2023-03-02 10:19:24 -08:00 |
|
Mathieu Beligon
|
61cb24a3fc
|
[threat-actors] Add Nemesis Kitten
|
2023-03-01 16:37:42 -08:00 |
|
Mathieu Beligon
|
84faa3c92b
|
[threat-actors] Add Karakurt
|
2023-03-01 16:34:03 -08:00 |
|
Mathieu Beligon
|
7d371b4c80
|
[threat-actors] Add CYBORG SPIDER alias to GOCLD BURLAP
|
2023-03-01 15:45:41 -08:00 |
|
Mathieu Beligon
|
fa57354471
|
[threat-actors] Add Chamelgang
|
2023-03-01 15:40:23 -08:00 |
|
Mathieu Beligon
|
bff978e4d1
|
[threat-actors] Add TA453
|
2023-03-01 15:24:55 -08:00 |
|
Mathieu Beligon
|
3406ad3aa9
|
[threat-actors] Add APT42
|
2023-03-01 15:18:53 -08:00 |
|
Mathieu Beligon
|
2567d6f1f8
|
[threat-actors] Add TA406
|
2023-03-01 15:01:22 -08:00 |
|
|
|
aaf944a11c
|
Merge pull request #822 from r0ny123/patch-1
add other actor synonyms from Google's report https://services.google.com/fh/files/blogs/google_fog_of_war_research_report.pdf
|
2023-02-25 23:22:17 +01:00 |
|
Rony
|
50624af741
|
add DEV-0147 https://twitter.com/MsftSecIntel/status/1625181255754039318
|
2023-02-25 20:18:09 +00:00 |
|
Rony
|
cf727f034c
|
add other actor synonyms from Google's report https://services.google.com/fh/files/blogs/google_fog_of_war_research_report.pdf
|
2023-02-26 01:05:50 +05:30 |
|
|
|
f4f1f38f3b
|
Merge pull request #821 from Delta-Sierra/main
add/update ransomware based on ransomlook
|
2023-02-24 06:34:51 +01:00 |
|
Delta-Sierra
|
27f4c9fcdc
|
synonyms must be an array
|
2023-02-23 14:26:20 +01:00 |
|
Delta-Sierra
|
0ca7675a5f
|
Merge https://github.com/MISP/misp-galaxy
|
2023-02-23 14:16:00 +01:00 |
|
Delta-Sierra
|
55725c771e
|
add/update ransomware based on ransomlook
|
2023-02-23 14:15:09 +01:00 |
|
|
|
aad2e33b80
|
Merge pull request #820 from tomking2/bug/mitre-attack-external-id-parsing
[fix] Mitre ATT&CK parsing to pull correct external_id value and update cluster
|
2023-02-21 11:45:20 +01:00 |
|
Tom King
|
e52eefa0e7
|
chg: [mitre] updated with correct ID parsing
|
2023-02-21 10:36:37 +00:00 |
|
Christophe Vandeplas
|
9f73ff73ac
|
fix: [first-dns] corrected typo
|
2023-02-21 10:54:30 +08:00 |
|
Christophe Vandeplas
|
8aadd13bb9
|
chg: [doc] update README
|
2023-02-21 10:45:54 +08:00 |
|
Christophe Vandeplas
|
e2f2026fea
|
chg: [first-dns] Adds FIRST DNS Abuse Techniques Matrix
|
2023-02-21 10:26:46 +08:00 |
|
Christophe Vandeplas
|
a6a9a73ae5
|
chg: [360net] updated to latest online version
|
2023-02-20 20:03:36 +08:00 |
|
|
|
6460fde2e4
|
chg: [threat-actor] version updated
|
2023-02-16 14:43:45 +01:00 |
|
|
|
d609ff16c0
|
Merge pull request #819 from danielplohmann/patch-29
adding Google names for RU threat actors
|
2023-02-16 14:43:05 +01:00 |
|
Daniel Plohmann
|
91255413d8
|
adding Google names for RU threat actors
https://blog.google/threat-analysis-group/fog-of-war-how-the-ukraine-conflict-transformed-the-cyber-threat-landscape/
|
2023-02-16 14:30:05 +01:00 |
|
|
|
73bd7d0983
|
Merge pull request #818 from Mathieu4141/threat-actors/proofpoint-aliases
[threat actors] Adding some actors from ProofPoint
|
2023-02-14 06:40:22 +01:00 |
|
Mathieu Beligon
|
9f09699047
|
[threat-actors] Fix: country was in the wrong place
|
2023-02-13 16:47:38 -08:00 |
|
Mathieu Beligon
|
ac067a236e
|
[threat-actors] fix: Add missing uuids
|
2023-02-13 16:36:41 -08:00 |
|
Mathieu Beligon
|
a792115dd8
|
fix
|
2023-02-13 16:26:10 -08:00 |
|
|
|
df2dd16e77
|
Merge pull request #817 from danielplohmann/patch-28
adding Broadcom name for SaintBear.
|
2023-02-13 23:20:38 +01:00 |
|
Mathieu Beligon
|
8193b05e14
|
[threat-actors] bump version
|
2023-02-13 14:18:58 -08:00 |
|
