892 commits

Author	SHA1	Message	Date
Rony	9b9ce4777a	chg: [threat-actor] added references, origin country, aliases to Sea Turtle	2023-07-28 11:04:11 +00:00
Thomas Dupuy	2dcd1d3544	upd: Add Worok TA and update APT-Q-12 to APT-C-60 as it was the first ... name mention in an article.	2023-07-18 19:53:54 +00:00
Delta-Sierra	c51d177abd	add SmugX & RedDelta	2023-07-10 15:46:01 +02:00
Delta-Sierra	20d3b3780a	merge	2023-06-19 08:35:48 +02:00
iglocska	14301a9c4c	chg: [threat actors] added Volt Typhoon	2023-05-25 07:29:48 +02:00
Delta-Sierra	e87b7bbf73	complete VENOM SPIDER threat actor	2023-05-23 11:43:20 +02:00
Delta-Sierra	18ee466ae4	add Hagga threat actor	2023-05-22 15:44:18 +02:00
Delta-Sierra	d202ed9f3f	Merge https://github.com/MISP/misp-galaxy	2023-05-15 09:54:25 +02:00
Delta-Sierra	a3fffacab3	add APT43 + tools	2023-05-15 08:41:17 +02:00
Daniel Plohmann	094d56057c	adding APT43 (Mandiant) for Kimsuky.	2023-05-09 14:35:41 +02:00
Sebastien Larinier	ddc285581d	Update threat-actor.json	2023-04-26 21:52:57 +02:00
Sebastien Larinier	d60cca9302	Update threat-actor.json ... fix mistake	2023-04-26 21:46:33 +02:00
Sebastien Larinier	142d4aeaef	Update threat-actor.json	2023-04-26 14:26:48 +02:00
Jürgen Löhel	15297c7b5f	chg [threat-actors] Add RedGolf ... Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>	2023-04-24 16:59:18 -06:00
Christophe Vandeplas	79b80b0869	chg: [rels] more threat actor relations	2023-04-23 17:54:58 +02:00
Christophe Vandeplas	3c6c204f01	chg: [rels] more threat actor relations	2023-04-23 17:45:58 +02:00
Christophe Vandeplas	138c7c7ba8	chg: [rels] more relations on cluster "value"	2023-04-23 17:36:02 +02:00
Christophe Vandeplas	bf7c5f1dd9	chg: [rels] threat-actor & MS activity group - on synonym	2023-04-23 11:56:41 +02:00
Christophe Vandeplas	a5e7e0c95f	chg: [rels] threat-actor & MS activity group - on value	2023-04-23 11:55:57 +02:00
Sebastien Larinier	862badf2c9	Update threat-actor.json	2023-04-19 17:41:44 +02:00
Sebastien Larinier	1c751b1ea8	Update threat-actor.json	2023-04-19 17:34:50 +02:00
Sebastien Larinier	165ce70a28	Merge branch 'MISP:main' into main	2023-04-19 16:48:02 +02:00
Sebastien Larinier	87ef0a400e	Update threat-actor.json	2023-04-19 15:42:14 +02:00
Sebastien Larinier	a77dc82c0a	Update threat-actor.json ... new apt30 group	2023-04-19 15:35:36 +02:00
Delta-Sierra	ecb7e79a6e	Merge https://github.com/MISP/misp-galaxy	2023-04-19 15:06:51 +02:00
Sebastien Larinier	926035633f	Merge branch 'MISP:main' into main	2023-04-19 11:55:57 +02:00
Daniel Plohmann	41afab1c06	adding Trend Micro alias Earth Smilodon for APT27	2023-04-18 20:11:57 +02:00
Delta-Sierra	6b8994271e	add relationships for HALFRIG & QUATTERRIG	2023-04-18 12:20:20 +02:00
Daniel Plohmann	02e23a9a47	adding Google alias HOODOO for APT41	2023-04-17 22:32:50 +02:00
Delta-Sierra	4a4fa6d16f	fix versions	2023-04-17 11:32:51 +02:00
Delta-Sierra	233a066a03	Merge https://github.com/MISP/misp-galaxy	2023-04-17 11:16:23 +02:00
Delta-Sierra	d4225c5469	add some SNOWYAMBER relationships	2023-04-17 11:16:21 +02:00
Daniel Plohmann	a966b3ff88	adding Trend Micro alias Earth Preta for Mustang Panda	2023-04-12 16:59:36 +02:00
Sebdraven	8713618777	Update threat-actor.json ... add new ref for sidecopy	2023-03-23 09:13:23 +01:00
Sebdraven	f5d68aa08d	Update threat-actor.json ... delete ref to APT30 for Naikon	2023-03-23 08:49:17 +01:00
Sebdraven	d5843d46e2	Update threat-actor.json ... add ref to Aoqin Dragon	2023-03-21 18:40:10 +01:00
Mathieu Beligon	d82ff1ecfb	[threat-actors] Add Anonymous Sudan	2023-03-15 17:38:03 -05:00
Daniel Plohmann	c39b46e9d5	Update threat-actor.json ... when value "Sofacy" was changed to "APT28", it seems Sofacy was not added to aliases, so it's missing right now.	2023-03-15 14:55:25 +01:00
Jürgen Löhel	2d30785af5	chg [threat-actors] Add TA866 ... Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>	2023-03-08 21:44:16 -06:00
Mathieu Beligon	395ffda94f	[threat-actors] bump version	2023-03-02 10:29:52 -08:00
Mathieu Beligon	e1407c3c3f	[threat-actors] Add SLIPPY SPIDER alias to LAPSUS	2023-03-02 10:29:29 -08:00
Mathieu Beligon	4bbee8c1e7	[threat-actors] Add PROPHET SPIDER	2023-03-02 10:19:24 -08:00
Mathieu Beligon	61cb24a3fc	[threat-actors] Add Nemesis Kitten	2023-03-01 16:37:42 -08:00
Mathieu Beligon	84faa3c92b	[threat-actors] Add Karakurt	2023-03-01 16:34:03 -08:00
Mathieu Beligon	7d371b4c80	[threat-actors] Add CYBORG SPIDER alias to GOCLD BURLAP	2023-03-01 15:45:41 -08:00
Mathieu Beligon	fa57354471	[threat-actors] Add Chamelgang	2023-03-01 15:40:23 -08:00
Mathieu Beligon	bff978e4d1	[threat-actors] Add TA453	2023-03-01 15:24:55 -08:00
Mathieu Beligon	3406ad3aa9	[threat-actors] Add APT42	2023-03-01 15:18:53 -08:00
Mathieu Beligon	2567d6f1f8	[threat-actors] Add TA406	2023-03-01 15:01:22 -08:00
Rony	50624af741	add DEV-0147 https://twitter.com/MsftSecIntel/status/1625181255754039318	2023-02-25 20:18:09 +00:00
Rony	cf727f034c	add other actor synonyms from Google's report https://services.google.com/fh/files/blogs/google_fog_of_war_research_report.pdf	2023-02-26 01:05:50 +05:30
Alexandre Dulaunoy	6460fde2e4	chg: [threat-actor] version updated	2023-02-16 14:43:45 +01:00
Daniel Plohmann	91255413d8	adding Google names for RU threat actors ... https://blog.google/threat-analysis-group/fog-of-war-how-the-ukraine-conflict-transformed-the-cyber-threat-landscape/	2023-02-16 14:30:05 +01:00
Alexandre Dulaunoy	73bd7d0983	Merge pull request #818 from Mathieu4141/threat-actors/proofpoint-aliases ... [threat actors] Adding some actors from ProofPoint	2023-02-14 06:40:22 +01:00
Mathieu Beligon	9f09699047	[threat-actors] Fix: country was in the wrong place	2023-02-13 16:47:38 -08:00
Mathieu Beligon	ac067a236e	[threat-actors] fix: Add missing uuids	2023-02-13 16:36:41 -08:00
Mathieu Beligon	a792115dd8	fix	2023-02-13 16:26:10 -08:00
Mathieu Beligon	8193b05e14	[threat-actors] bump version	2023-02-13 14:18:58 -08:00
Mathieu Beligon	d34e894d2d	[threat-actors] Add TA2536	2023-02-13 13:45:41 -08:00
Mathieu Beligon	20c31a5d10	[threat-actors] Add TA577	2023-02-13 13:32:24 -08:00
Mathieu Beligon	e836a4a63c	[threat-actors] Add TA575	2023-02-13 12:02:32 -08:00
Mathieu Beligon	c52ac53765	[threat-actors] Add TA570	2023-02-13 11:54:47 -08:00
Mathieu Beligon	5f274f58c9	[threat-actors] Add Moskalvzapoe	2023-02-13 11:44:59 -08:00
Daniel Plohmann	62256854bc	adding Broadcom name for SaintBear.	2023-02-13 14:05:35 +01:00
Mathieu Beligon	33ff650327	[threat-actors] Add more information about NoName057(16)	2023-02-10 14:14:52 -08:00
Daniel Plohmann	9710e09e17	new APT29 name used by Recorded Future ... cf. https://go.recordedfuture.com/hubfs/reports/cta-2023-0127.pdf	2023-02-02 11:46:50 +01:00
Alexandre Dulaunoy	b7543c5012	Merge pull request #789 from Mathieu4141/threat-actors/fix-sectorj04 ... [threat-actors] Remove SectorJ04 duplicate	2023-01-27 15:05:37 +01:00
Mathieu Beligon	a452263ace	[threat-actors] pr.review: Add SectorJ04 as alias of TA505	2023-01-27 13:32:58 +01:00
Alexandre Dulaunoy	e54366fb87	chg: [threat-actor] added the missing synonyms	2023-01-10 15:55:30 +01:00
Delta-Sierra	3f4edb480b	add Malteiro	2022-12-16 16:43:50 +01:00
Delta-Sierra	5931f51d7a	add TAG-53	2022-12-08 11:31:02 +01:00
Delta-Sierra	3ea2d62a83	Version Update	2022-11-28 16:27:54 +01:00
Delta-Sierra	6016b1000c	Merge https://github.com/MISP/misp-galaxy	2022-11-28 16:17:08 +01:00
Delta-Sierra	6c36295318	Update several RAT & Ransomwares	2022-11-28 16:13:38 +01:00
Christian Studer	e3126ef857	fix: [clusters] Fixed some other few meta field names	2022-11-24 09:17:28 +01:00
Delta-Sierra	f4abf37b01	fix versions	2022-11-22 12:45:15 +01:00
Delta-Sierra	c02b74f999	merge	2022-11-22 12:43:18 +01:00
Delta-Sierra	8bf6d73d66	add BazarCall campaign	2022-11-22 09:08:28 +01:00
Thomas Dupuy	be7450494e	Add Evasive Panda Threat Actor	2022-11-18 16:38:11 +00:00
Delta-Sierra	91d535925f	version fix	2022-11-15 13:36:49 +01:00
Delta-Sierra	3837058ab1	merge	2022-11-15 12:54:03 +01:00
Delta-Sierra	d020efd276	add raspberry Robin worm & others	2022-11-15 11:57:10 +01:00
Alexandre Dulaunoy	b787bbeb23	Merge pull request #792 from nyx0/main ... Add RomCom TA.	2022-11-05 07:50:20 +01:00
Alexandre Dulaunoy	3b196f8361	Merge pull request #791 from Mathieu4141/threat-actors/add-phosphorus-alias-to-apt-35 ... [threat-actors] Add Phosphorus in APT35 aliases	2022-11-05 07:49:55 +01:00
Thomas Dupuy	9ac53e5d5e	Add RomCom TA.	2022-11-04 02:34:10 +00:00
Alexandre Dulaunoy	6c4da5dd55	Merge pull request #790 from Mathieu4141/threat-actors/fix-dust-storm ... [threat-actors] Remove DustStorm alias from APT10	2022-11-03 11:35:20 +01:00
Alexandre Dulaunoy	52a6fff6a2	Merge pull request #788 from Mathieu4141/threat-actors/fix-cobalt-dickens ... [threat-actors] Remove cobalt dickens duplicate	2022-11-03 11:27:08 +01:00
Alexandre Dulaunoy	3b4dcd6ad3	Merge pull request #787 from Mathieu4141/threat-actors/fix-subaat-duplicate ... [threat-actors] Remove subaat duplicate	2022-11-03 11:26:21 +01:00
Mathieu Beligon	8a9dd47f8f	[threat-actors] Add Phosphorus in APT35 aliases	2022-11-02 23:49:22 -07:00
Mathieu Beligon	21d4292faf	[threat-actors] Remove DustStorm alias from APT10	2022-11-02 23:31:31 -07:00
Mathieu Beligon	e61733591f	[threat-actors] Remove SectorJ04 duplicate	2022-11-02 20:30:40 -07:00
Mathieu Beligon	9f0869097a	[threat-actors] Remove cobalt dickens duplicate	2022-11-02 18:09:42 -07:00
Mathieu Beligon	e3e5560e37	[threat-actors] Remove subaat duplicate	2022-11-02 17:57:47 -07:00
Mathieu Beligon	5801bbcfc1	[threat-actors] Remove Skeleton Spider duplicate	2022-11-02 17:38:07 -07:00
Delta-Sierra	355025eb5b	fix metadata in wrong slot	2022-10-04 13:28:42 +02:00
Delta-Sierra	e5b3062912	add Volatile Cedar synonym	2022-10-03 16:06:13 +02:00
Alexandre Dulaunoy	409c82f40c	Merge pull request #781 from Mathieu4141/threat-actors/fix-neodymium ... [threat-actors] Fix G0055 (NEODYMIUM) alias	2022-09-30 06:39:31 +02:00
Alexandre Dulaunoy	588184bacd	Merge pull request #780 from Mathieu4141/threat-actors/fix-svmondr ... [threat-actors] Remove SVCMONDR duplicate	2022-09-30 06:38:56 +02:00
Alexandre Dulaunoy	800006e6ab	Merge pull request #778 from Mathieu4141/threat-actors/fix-malware-reuser-duplicate ... [threat-actors] Fix Volatile Cedar and Dancing Salome conflicts	2022-09-30 06:37:15 +02:00
Mathieu Beligon	74c6835d18	[threat-actors] Fix G0055 (NEODYMIUM) alias	2022-09-29 17:16:57 -07:00