Mathieu Beligon
|
4f47e6e2d3
|
[threat-actors] Equation group: separate from Lamberts and add tools
|
2022-09-29 11:28:54 -07:00 |
|
Thomas Dupuy
|
c66d6823a1
|
Add APT-Q-12 Threat Actor.
|
2022-09-29 02:30:41 +00:00 |
|
|
c3b65a2d15
|
chg: [threat-actor] JSON fix
|
2022-09-27 08:18:13 +02:00 |
|
|
067e449a41
|
Merge branch 'main' of https://github.com/nyx0/misp-galaxy into nyx0-main
|
2022-09-27 08:17:41 +02:00 |
|
Christophe Vandeplas
|
e259458d5a
|
chg: [mitre] bump to v11.3
|
2022-09-27 07:30:13 +02:00 |
|
Thomas Dupuy
|
bfd1812cef
|
Add Void Balaur.
|
2022-09-27 00:11:20 +00:00 |
|
|
eacab6ca27
|
new: [malpedia] remove duplicate UUIDs objects (coming from Malpedia API)
|
2022-09-26 10:58:09 +02:00 |
|
|
7cd322640f
|
Merge pull request #771 from Delta-Sierra/main
fetch malpedia
|
2022-09-26 10:07:24 +02:00 |
|
Delta-Sierra
|
a611230bef
|
fetch malpedia
|
2022-09-26 09:23:07 +02:00 |
|
Mathieu Beligon
|
22a39f4fdc
|
[threat-actors] Add BITWISE SPIDER
|
2022-09-20 11:23:33 -07:00 |
|
|
9b8b51fe53
|
Merge pull request #769 from Mathieu4141/threat-actors-add/no-name-057-06
[threat-actors] Add NoName057(16)
|
2022-09-17 07:43:42 +02:00 |
|
|
2f169e4258
|
Merge pull request #766 from Mathieu4141/threat-actors/fix-ta505
[threat-actors] Clean TA505 aliases
|
2022-09-17 07:43:18 +02:00 |
|
Mathieu Beligon
|
580d2c6931
|
[threat-actors] Add NoName057(16)
|
2022-09-16 20:11:06 -06:00 |
|
|
30cb4e7e60
|
Merge pull request #768 from Delta-Sierra/main
New clusters
|
2022-09-16 06:40:43 +02:00 |
|
Delta-Sierra
|
8202a7f48f
|
Add PlugX ref
|
2022-09-15 15:39:47 +02:00 |
|
Delta-Sierra
|
0903300b75
|
Add Chisel
|
2022-09-15 13:24:49 +02:00 |
|
Delta-Sierra
|
021fcd2c91
|
add Lorenz ransomware
|
2022-09-15 10:29:46 +02:00 |
|
|
1c8d82cfcc
|
new: [threat-actor] hezb added
|
2022-09-14 11:00:33 +02:00 |
|
Christophe Vandeplas
|
b011ddee5b
|
fix: [360net] fixes null entries in lists
|
2022-09-13 22:12:51 +02:00 |
|
Christophe Vandeplas
|
c5a5fa7cfa
|
chg: [360net] add 360.net APT list fixes #764
|
2022-09-13 21:48:16 +02:00 |
|
Mathieu Beligon
|
e1f5d3b5d8
|
[threat-actors] Keep meta from old Xenotime
|
2022-09-13 11:40:17 -07:00 |
|
Mathieu Beligon
|
4ff0bdfe8e
|
[threat-actors] Clean TA505 aliases
|
2022-09-13 11:34:02 -07:00 |
|
Delta-Sierra
|
e3d88f45c6
|
add Dark.IoT
|
2022-09-13 13:35:55 +02:00 |
|
Delta-Sierra
|
6dba3abe13
|
add hezb
|
2022-09-13 10:40:00 +02:00 |
|
Mathieu Beligon
|
273c7c9b97
|
[threat-actors] Remove Xenotime duplicate
|
2022-09-12 17:10:49 -07:00 |
|
Delta-Sierra
|
705d0d2e72
|
add BumbleBee backdoor
|
2022-09-12 10:51:43 +02:00 |
|
Delta-Sierra
|
0440db12e9
|
add DangerousSavanna campaign
|
2022-09-07 11:01:23 +02:00 |
|
Delta-Sierra
|
77db2370b1
|
Add Lockbit synonym
|
2022-09-07 11:00:41 +02:00 |
|
Delta-Sierra
|
775d3c183b
|
Add Lockbit synonym
|
2022-09-07 09:26:38 +02:00 |
|
Rony
|
aea413cebf
|
chg: [threat-actor] version bump
|
2022-09-01 10:32:01 +00:00 |
|
Rony
|
db913e5ab4
|
fix: [threat-actor] remove duplicate entries
|
2022-09-01 09:53:11 +00:00 |
|
Rony
|
6aea5ee05c
|
chg: [threat-actor] add Aoqin Dragon
|
2022-09-01 09:46:43 +00:00 |
|
Rony
|
fb0cf3c7e5
|
chg: [threat-actor] miscellaneous updates
|
2022-09-01 09:17:31 +00:00 |
|
Daniel Plohmann
|
d18f5bc8b6
|
mini-fix: adding https protocol to a reference
in automated processing and display, this may otherwise lead to a malformed local / relative link.
|
2022-08-30 17:08:03 +02:00 |
|
|
5175fb0364
|
Merge pull request #760 from Delta-Sierra/main
Add GootLoader & MOUSEISLAND in tool
|
2022-08-29 12:02:55 +02:00 |
|
Rony
|
e7178a1e08
|
fix: [threat-actor] remove duplicate entries from APT9
|
2022-08-27 12:54:32 +00:00 |
|
Rony
|
27300c6381
|
chg: [threat-actor] add avast blog to APT40
|
2022-08-27 12:41:31 +00:00 |
|
Rony
|
7f526e230b
|
chg: [threat-actor] add Microsoft and PwC report to actors' references
|
2022-08-27 12:34:36 +00:00 |
|
Rony
|
6ad9699a38
|
chg: [threat-actor] add recorded future reference to RedAlpha
|
2022-08-27 12:10:51 +00:00 |
|
Rony
|
2dc138ae01
|
chg: [threat-actor] add Adam Kozy's testimony ro APT41 and APT26
|
2022-08-27 12:08:11 +00:00 |
|
Rony
|
0b140b7097
|
chg: [threat-actor] miscellaneous updates including merge of some actors and fix the error committed in 9cfcc0d9ac
|
2022-08-27 11:58:03 +00:00 |
|
|
8bea9f3b4b
|
Merge pull request #755 from Mathieu4141/threat-actors/fix-winnti
[threat-actors] Fix Axiom/Winnti/Suckfly/APT41 conflicts
|
2022-08-27 08:25:20 +02:00 |
|
Mathieu Béligon
|
9cfcc0d9ac
|
Add aliases to APT41
Co-authored-by: Rony <rony_123@protonmail.ch>
|
2022-08-26 14:54:02 -07:00 |
|
Mathieu Beligon
|
6e00329ba6
|
[threat-actors] Fix aliases
|
2022-08-26 11:09:29 -07:00 |
|
Delta-Sierra
|
534dacb7fb
|
add GootLoader
|
2022-08-26 10:12:36 +02:00 |
|
Delta-Sierra
|
d5a9365aae
|
add MOUSEISLAND
|
2022-08-26 09:23:38 +02:00 |
|
Mathieu Beligon
|
9b714dcd76
|
[threat-actors] Merge Axiom into APT17
|
2022-08-25 13:49:07 -07:00 |
|
Delta-Sierra
|
5b3c395f10
|
jq
|
2022-08-24 14:27:33 +02:00 |
|
Delta-Sierra
|
cb422c2190
|
update Guildma
|
2022-08-24 14:07:01 +02:00 |
|
Yosirion95
|
cda80e5496
|
Add synonyms to sector.json
|
2022-08-21 11:09:50 +02:00 |
|
|
9efca4c41b
|
fix: [threat-actor] UUID reused fixed (UUIDs cannot be reused across different cluster)
Add the missing the relationship for the new UUID
|
2022-08-21 09:17:56 +02:00 |
|
Rony
|
5b42a09dc2
|
add PARINACOTA to threat-actor.json
MSTIC names digital crime actors based on global volcanoes
|
2022-08-20 17:10:15 +00:00 |
|
Rony
|
6fd584fa88
|
remove APT36/ Transpert Tribe from microsoft-activity-group.json cause we don't know any MSTIC name yet.
|
2022-08-20 17:06:18 +00:00 |
|
|
6b137ea12c
|
Merge pull request #749 from Mathieu4141/threat-actors/fix-naikon-cluster
[threat actors] Fix threat actors related to Lotus Panda
|
2022-08-20 11:46:15 +02:00 |
|
Mathieu Beligon
|
7f82616c10
|
fix axiom related field
|
2022-08-19 12:48:40 -07:00 |
|
Mathieu Beligon
|
969f461709
|
merge into apt41
|
2022-08-19 12:45:47 -07:00 |
|
Christophe Vandeplas
|
1b69b654a8
|
chg: [atrm] bump to latest ATRM version
|
2022-08-19 21:19:23 +02:00 |
|
Mathieu Beligon
|
fd9201e9e0
|
Merge APT22 and suckfly
|
2022-08-19 12:16:30 -07:00 |
|
Mathieu Beligon
|
768c94671c
|
Fix hellsing ref
|
2022-08-19 11:34:16 -07:00 |
|
|
a8b234d694
|
Merge pull request #753 from Mathieu4141/threat-actors/fix-bronze-president
[threat-actors] Remove duplicated BRONZE PRESIDENT entity
|
2022-08-19 06:26:11 +02:00 |
|
Mathieu Béligon
|
fcd6faec78
|
Capitalize override panda alias
Co-authored-by: Rony <rony_123@protonmail.ch>
|
2022-08-18 20:51:03 -07:00 |
|
Mathieu Béligon
|
54f3ef2831
|
capitalize lotus panda alias
Co-authored-by: Rony <rony_123@protonmail.ch>
|
2022-08-18 20:50:32 -07:00 |
|
Mathieu Béligon
|
c9b11553eb
|
normalize APT30 alias
Co-authored-by: Rony <rony_123@protonmail.ch>
|
2022-08-18 20:32:44 -07:00 |
|
Mathieu Beligon
|
c1abedb446
|
Move Lotus Panda alias to Lotus Blossom
|
2022-08-18 20:21:31 -07:00 |
|
Mathieu Beligon
|
a61ef2a88f
|
[threat-actors] Fix Axiom/Winnti/Suckfly/APT41 conflicts
|
2022-08-18 17:03:26 -07:00 |
|
Mathieu Beligon
|
84e69ad4be
|
Add DarkCommet as a tool of GoldenRAT
|
2022-08-18 15:47:04 -07:00 |
|
Mathieu Beligon
|
1acc51a7a6
|
[threat-actors] Add more data about APT-C-27
|
2022-08-18 15:44:18 -07:00 |
|
Mathieu Beligon
|
ec988c97d0
|
[threat-actors] Remove duplicated APT-C-27
|
2022-08-18 15:34:08 -07:00 |
|
Mathieu Beligon
|
d9046c8619
|
[threat-actors] Remove duplicated BRONZE PRESIDENT entity
|
2022-08-18 15:12:18 -07:00 |
|
Mathieu Beligon
|
a046e8094d
|
Merge APT30 and Naikon
|
2022-08-18 11:36:45 -07:00 |
|
Mathieu Beligon
|
5e4a4c3453
|
Merge branch 'main' into threat-actors/fix-naikon-cluster
|
2022-08-18 09:01:36 -07:00 |
|
Mathieu Beligon
|
264e764dfa
|
Remove ATK34 alias
|
2022-08-18 08:59:04 -07:00 |
|
Delta-Sierra
|
3f036db1e3
|
add TA558
|
2022-08-18 15:54:28 +02:00 |
|
Mathieu Beligon
|
71e3e1f3eb
|
Fix ATK aliases
|
2022-08-17 13:39:43 -07:00 |
|
Mathieu Beligon
|
a6242d4732
|
Merge branch 'main' into threat-actors/fix-naikon-cluster
|
2022-08-17 13:37:01 -07:00 |
|
Mathieu Beligon
|
0d6399aa2b
|
Add ATK78 alias for Thrip
|
2022-08-17 12:04:32 -07:00 |
|
Mathieu Beligon
|
53282255ce
|
Branch out Goblin Panda from Hellsing
|
2022-08-17 11:55:35 -07:00 |
|
Mathieu Beligon
|
3f50cf0175
|
Create a tool for Esile
|
2022-08-17 11:19:30 -07:00 |
|
Rony
|
f608312577
|
addresses https://github.com/MISP/misp-galaxy/pull/751#issuecomment-1217680586
|
2022-08-17 08:52:35 +00:00 |
|
Rony
|
ccd10b54f4
|
remove duplicate reference
|
2022-08-17 12:49:56 +05:30 |
|
Rony
|
0cec882cc5
|
merge microcin/sixlittlemonkeys to vicious panda
|
2022-08-17 07:06:51 +00:00 |
|
|
a373909bb1
|
Merge pull request #748 from r0ny123/patch-2
Update threat-actor.json
|
2022-08-17 07:44:46 +02:00 |
|
|
352998a84d
|
fix: [threat-actor] add missing refs for APT33 including CFR link
|
2022-08-17 07:40:23 +02:00 |
|
Mathieu Beligon
|
d05b29c1af
|
[threat-actors] Remove duplicate APT33
|
2022-08-16 17:15:30 -07:00 |
|
Mathieu Beligon
|
9c6f106928
|
[threat actor] Fix aliases related to Lotus Panda
|
2022-08-16 16:58:35 -07:00 |
|
Rony
|
5b25b574b3
|
add uac-0010 references from cert-ua
|
2022-08-16 10:19:53 +00:00 |
|
Rony
|
370045b01d
|
Merge "red october" and "cloud atlas" to inception framework"
|
2022-08-16 09:30:29 +00:00 |
|
Rony
|
62b168600f
|
fix duplicates
|
2022-08-16 12:15:30 +05:30 |
|
Rony
|
490bc6a05c
|
fix duplicate
|
2022-08-16 12:10:27 +05:30 |
|
Rony
|
bbe84c5985
|
updates to russian actors
|
2022-08-16 12:07:59 +05:30 |
|
Rony
|
de76aef023
|
Update threat-actor.json
|
2022-08-16 10:49:13 +05:30 |
|
Rony
|
f4b63d4514
|
updates to tianwu
|
2022-08-16 10:30:33 +05:30 |
|
|
96d31aa8c7
|
chg: [threat-actor] jq all the things
|
2022-08-11 17:50:00 +02:00 |
|
Thomas Dupuy
|
ed24dcaf19
|
Add link for SLIME29.
|
2022-08-11 15:41:01 +00:00 |
|
Thomas Dupuy
|
912050b9b7
|
Update commit based on feeback.
|
2022-08-11 15:20:32 +00:00 |
|
Thomas Dupuy
|
6e0df72ef4
|
Add Threat Actors from BH Asia22 prez.
|
2022-08-10 18:53:38 +00:00 |
|
Christophe Vandeplas
|
1369756810
|
chg: [atrm] Add Azure Threat Research Matrix Galaxy and generation script
|
2022-08-06 21:19:31 +02:00 |
|
Daniel Plohmann
|
bdaadea58e
|
removing a leading double quote in a URL.
|
2022-08-02 18:17:58 +02:00 |
|
Daniel Plohmann
|
bc20a463c8
|
merging TG2003 / Elephant Beetle into FIN13
as indicated in the respective resources published by the organizations using these aliases.
|
2022-08-02 14:11:43 +02:00 |
|
|
6427746ad8
|
Merge pull request #727 from Mathieu4141/threat-actors/merge-cutting-kitten-cleaver
Fix Cleaver aliases
|
2022-07-27 23:17:42 +02:00 |
|
|
63f5122ad4
|
Merge pull request #742 from r0ny123/patch-1
Update threat-actor.json
|
2022-07-27 18:56:47 +02:00 |
|
Mathieu Beligon
|
51aacd6b03
|
Reduce diff with old version
|
2022-07-26 23:53:22 -07:00 |
|
Mathieu Beligon
|
acc6ada575
|
r0ny123.review: Use Cutting Kitten as main value for ITSecTeam
|
2022-07-26 23:27:39 -07:00 |
|
Mathieu Beligon
|
d815bfa174
|
Merge remote-tracking branch 'upstream/main' into threat-actors/merge-cutting-kitten-cleaver
|
2022-07-26 23:22:03 -07:00 |
|
Daniel Plohmann
|
26f6a33695
|
more aliases from Unit 42
|
2022-07-26 11:09:33 +02:00 |
|
Rony
|
5a7f3a7207
|
fix
|
2022-07-25 17:17:52 +05:30 |
|
Rony
|
8ce0df6eb4
|
Update threat-actor.json
Merge aquatic panda & earth lusca
|
2022-07-25 17:15:23 +05:30 |
|
|
6b6398bf2d
|
fix: [threat-actor] incorrect merge fixed
|
2022-07-20 18:45:50 +02:00 |
|
|
b4ce9a9453
|
Merge branch 'main' of https://github.com/r0ny123/misp-galaxy into r0ny123-main
|
2022-07-20 18:41:27 +02:00 |
|
Rony
|
add6b27466
|
update
|
2022-07-20 21:39:33 +05:30 |
|
Rony
|
2b54df56f9
|
update
|
2022-07-20 21:32:11 +05:30 |
|
Rony
|
2e045d9c8c
|
chg: [fix] resolve conflict
|
2022-07-20 21:28:15 +05:30 |
|
Daniel Plohmann
|
5825783a85
|
removed duplicate UUID for Kinsing
my apologies, looks like I had not rolled a new UUID for one of the entries added...
|
2022-07-20 17:07:05 +02:00 |
|
Rony
|
932fcf1871
|
added Red Nue
|
2022-07-20 15:07:35 +05:30 |
|
Rony
|
082039b3b0
|
added CN actors from secureworks threat profile
https://www.secureworks.com/research/threat-profiles?filter=item-china and fixed some AKAs
|
2022-07-20 14:52:58 +05:30 |
|
Daniel Plohmann
|
ed32c508b7
|
added more Unit 42 aliases / groups
|
2022-07-20 08:38:03 +02:00 |
|
Rony
|
000bfe92d9
|
add APT9/Red Pegasus & BRONZE EDGEWOOD/Red Hariasa
|
2022-07-20 10:04:58 +05:30 |
|
Rony
|
2e8a577b0c
|
add PwC naming to CN actors
|
2022-07-20 09:45:21 +05:30 |
|
Rony
|
3fabd58416
|
chg: [threat-actor] fixed
|
2022-07-19 23:36:30 +05:30 |
|
Rony
|
79c84d3768
|
add Earth Berberoka, Earth Lusca and Earth Wendigo
|
2022-07-19 22:42:50 +05:30 |
|
Daniel Plohmann
|
082d506b64
|
adding new Unit 42 names
First PR: those are the directly mappable names. I will follow up after deconfliction and then with a few new entries.
|
2022-07-19 08:45:09 +02:00 |
|
Daniel Plohmann
|
240a757826
|
Update threat-actor.json
adding Predatory Sparrow due to recent events.
|
2022-07-13 10:02:07 +02:00 |
|
|
cf603e8160
|
Merge pull request #736 from Delta-Sierra/main
add Qbot
|
2022-07-12 18:41:33 +02:00 |
|
Thomas Dupuy
|
90da0d798f
|
Set country to LB instead of IR based on operational activity.
|
2022-07-12 16:21:41 +00:00 |
|
Delta-Sierra
|
b1c853bf42
|
update version
|
2022-07-12 15:51:55 +02:00 |
|
Thomas Dupuy
|
1a8835bcae
|
Remove list from POLONIUM TA.
|
2022-07-12 13:11:11 +00:00 |
|
Thomas Dupuy
|
a86d866534
|
Add POLONIUM TA.
|
2022-07-12 12:14:27 +00:00 |
|
Delta-Sierra
|
d40017ae50
|
add Qbot
|
2022-07-12 14:03:43 +02:00 |
|
Delta-Sierra
|
6c6355f2ba
|
fix typo
|
2022-07-12 11:31:08 +02:00 |
|
Delta-Sierra
|
300d608770
|
jq
|
2022-07-12 10:54:37 +02:00 |
|
Delta-Sierra
|
71c93f5b24
|
fix caps typo
|
2022-07-12 10:53:14 +02:00 |
|
Delta-Sierra
|
4ea34fc5a4
|
Merge https://github.com/Delta-Sierra/misp-galaxy into main
|
2022-07-12 10:51:59 +02:00 |
|
Delta-Sierra
|
924eda26ca
|
Add EnemyBot +relationships
|
2022-07-12 10:49:11 +02:00 |
|
Deborah Servili
|
ca7d524d9c
|
Merge branch 'main' into main
|
2022-07-08 16:27:28 +02:00 |
|
Delta-Sierra
|
29aa7b3f69
|
add Maui ransomware
|
2022-07-08 14:49:12 +02:00 |
|
Delta-Sierra
|
56a53433f0
|
add HelloXD ransomware
|
2022-07-08 12:05:31 +02:00 |
|
Delta-Sierra
|
279b89f6d9
|
fix duplicate extension-2
|
2022-07-06 09:38:02 +02:00 |
|
Delta-Sierra
|
67d5f5c7c0
|
fix duplicate extension
|
2022-07-06 09:34:11 +02:00 |
|
Delta-Sierra
|
7e37fa0cdd
|
merge + update medusalocker
|
2022-07-06 09:28:46 +02:00 |
|
Delta-Sierra
|
c2e7ef4fab
|
Update Medusa Locker and others
|
2022-07-06 08:43:59 +02:00 |
|
marjatech
|
587dc8560b
|
add script to automate malpedia update
|
2022-07-04 14:24:34 +02:00 |
|
Mathieu Beligon
|
693eed8d78
|
[threat actor] Break Cleaver aliases into respective entries
|
2022-07-04 14:05:29 +02:00 |
|
marjatech
|
1212a75cc4
|
update malpedia
|
2022-07-04 11:02:02 +02:00 |
|
Mathieu Beligon
|
d63c990dad
|
[threat-actors] Separate ITSecTeam from Cleaver
|
2022-06-30 14:34:05 +02:00 |
|
Mathieu Beligon
|
b8d4ffdbde
|
Merge Cutting Kitten and Cleaver
|
2022-06-29 20:15:12 +02:00 |
|
Koen Van Impe
|
0c9aa68db6
|
Update surveillance-vendor.json
|
2022-06-22 13:30:55 +02:00 |
|
Koen Van Impe
|
22c2f7b999
|
Add RCS Lab S.p.A. to surveillance-vendor
|
2022-06-22 11:20:52 +02:00 |
|
Mathieu Beligon
|
d79c5bd1ab
|
Add ToddyCat Threat actor
|
2022-06-21 15:12:42 +02:00 |
|
Rony
|
c030fcdab6
|
chg: [threat-actor] added PwC naming for Indian actors
https://www.pwc.com/gx/en/issues/cybersecurity/cyber-threat-intelligence/cyber-year-in-retrospect/yir-cyber-threats-report-download.pdf
|
2022-06-11 15:46:54 +05:30 |
|
Thanat0s
|
44a99d066a
|
Y en a un peut plus je vous le mets quand meme ?
|
2022-06-11 04:24:04 -04:00 |
|
Thanat0s
|
57befd7259
|
jq all the things
|
2022-06-10 19:12:12 -04:00 |
|
Thanat0s
|
51f98f4706
|
Attck link + typo on TA551
|
2022-06-10 18:40:16 -04:00 |
|
Thanat0s
|
f97fee7135
|
Typo on TA551
|
2022-06-10 18:38:25 -04:00 |
|
Thanat0s
|
297acc0f5e
|
Add Mitre vs Thales RosettaStone
|
2022-06-10 18:24:15 -04:00 |
|
Rony
|
e916267c7c
|
chg: [threat-actor] add reference to bitter & sidewinder group
|
2022-06-08 23:22:17 +05:30 |
|
Christophe Vandeplas
|
39073004c4
|
[mitre] bump to MITRE ATT&CK v11.2
|
2022-05-25 21:03:14 +02:00 |
|
Christophe Vandeplas
|
4a469299fd
|
[mitre] update sorting algo
will make future ATT&CK updates less noisy in the git diff
|
2022-05-25 21:00:57 +02:00 |
|
Mathieu Beligon
|
dca70783bf
|
[threat-actors] validate file
|
2022-05-23 11:32:24 +02:00 |
|
Mathieu Beligon
|
c1cfc19871
|
[threat actors] Remove dead link for sandworm threat actor
|
2022-05-23 11:30:04 +02:00 |
|
Mathieu Beligon
|
36a1466661
|
[threat-actors] Add RansomHouse
|
2022-05-23 11:29:39 +02:00 |
|
|
a838eaf9db
|
Merge pull request #717 from jloehel/krane
chg: [cryptominers] Adds Krane
|
2022-05-18 08:17:16 +02:00 |
|
Jürgen Löhel
|
1be9a10ef9
|
chg: [cryptominers] Adds Krane
Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>
|
2022-05-17 14:47:29 -05:00 |
|
Jürgen Löhel
|
9db5d18114
|
chg: [android] Adds Vulture
Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>
|
2022-05-17 14:16:21 -05:00 |
|
Rony
|
2721522e82
|
chg: [threat-actor] add exotic lily, ta578, ta579
|
2022-05-14 20:52:15 +05:30 |
|
Jürgen Löhel
|
45da13ce5e
|
chg: [backdoors] Adds BPFDoor
Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>
|
2022-05-11 19:06:19 -05:00 |
|
|
fcdc6c86e6
|
chg: [threat-actor] add TG2003 synomym to Elephant Beetle
|
2022-05-09 14:24:28 +02:00 |
|
|
9130365e2e
|
chg: [threat-actor] Elephant Beetle added
Fix #708
|
2022-05-09 14:23:12 +02:00 |
|
|
bb434b11cf
|
chg: [threat-actor] ModifiedElephant added
Fix #709
|
2022-05-09 14:16:01 +02:00 |
|
|
06550a7945
|
chg: [threat-actor] fix refs field -> it's always an array
|
2022-05-09 13:46:16 +02:00 |
|
|
b67e3ed3f8
|
Merge branch 'threatactor-cosmiclynx-add' of https://github.com/adammchugh/MISP-Galaxy-Updates into adammchugh-threatactor-cosmiclynx-add
|
2022-05-09 13:43:44 +02:00 |
|
Rony
|
c0be6677c2
|
chg: [threat-actor] added actor Red Menshen
https://www.pwc.com/gx/en/issues/cybersecurity/cyber-threat-intelligence/cyber-year-in-retrospect/yir-cyber-threats-report-download.pdf
|
2022-05-07 15:44:10 +05:30 |
|
Rony
|
11eca69ebc
|
chg: [threat-actor] added Curious Gorge
|
2022-05-07 12:40:35 +05:30 |
|
Daniel Plohmann
|
26c1850377
|
Update threat-actor.json
adding Red Dev 4 as alias for GALLIUM as used by PwC.
|
2022-05-06 09:47:48 +02:00 |
|
Daniel Plohmann
|
06c293072c
|
Update threat-actor.json
adding UNC3524 to the actor galaxy cluster.
|
2022-05-04 13:21:56 +02:00 |
|
3c7
|
0ad65fbe9f
|
Forgot to jq all the things
|
2022-04-28 09:42:25 +02:00 |
|
3c7
|
dfb6c0668e
|
Added SaintBear
|
2022-04-28 09:36:25 +02:00 |
|
Christophe Vandeplas
|
33476bec81
|
chg: [mitre] bump to MITRE ATT&CK v11.0
|
2022-04-25 18:29:57 +02:00 |
|
|
664f6d80cc
|
chg: [threat-actor] Killnet description added
|
2022-04-21 15:05:50 +02:00 |
|
|
1e383e2452
|
chg: [threat-actor] version updated
|
2022-04-21 14:53:14 +02:00 |
|
Mathieu Beligon
|
c8455a6c4d
|
[actors] Add killnet
|
2022-04-21 14:06:28 +02:00 |
|
Adam McHugh
|
53a0fc56d3
|
Added Cosmic Lynx Threat Actor from Agari Whitepaper advisory
|
2022-04-18 10:16:26 +09:30 |
|
|
bca7381f33
|
fix: [ransomware] refs are within meta
|
2022-04-17 15:43:23 +02:00 |
|
|
eb7c5ebaf1
|
fix: [ransom] remove empty ref
|
2022-04-17 15:39:02 +02:00 |
|
|
bc696b43f4
|
chg: [ransomware] jq all the things
|
2022-04-17 15:35:50 +02:00 |
|
|
00d33fd292
|
Merge pull request #701 from adammchugh/ransomware-conti-update
Ammended Conti ransomware entry with ACSC 2021-010 advisory data
|
2022-04-17 15:35:25 +02:00 |
|
|
66744a4cd0
|
Merge pull request #704 from adammchugh/cryptominers-bluemockingbird-add
Added Cryptominer Blue Mockingbird from RedCanary advisory.
|
2022-04-17 14:43:59 +02:00 |
|
|
14907e3eef
|
Merge pull request #703 from adammchugh/threatactor-copypaste-add
Added Copy-Paste Threat Actor from ACSC Advisory 2020-008
|
2022-04-17 14:43:37 +02:00 |
|
Adam McHugh
|
84eac4b102
|
Added Cosmic Lynx Threat Actor from Agari Whitepaper advisory
|
2022-04-17 19:50:08 +09:30 |
|
Adam McHugh
|
f00e80ae7e
|
Added Cryptominer Blue Mockingbird from RedCanary advisory.
|
2022-04-17 19:44:42 +09:30 |
|
Adam McHugh
|
cff8a38c5f
|
Added Copy-Paste Threat Actor from ACSC Advisory 2020-008
|
2022-04-17 19:37:26 +09:30 |
|
Adam McHugh
|
622c0502aa
|
Ammended Conti ransomware entry with ACSC 2021-010 advisory data
|
2022-04-17 19:23:11 +09:30 |
|
Adam McHugh
|
99caab201f
|
Ammended Blackcat ransomware entry with ACSC 2022-004 advisory data
|
2022-04-17 18:05:24 +09:30 |
|
Thomas Dupuy
|
bd05eb0bba
|
upd: [cluster] add Threat Actor BladeHawk.
|
2022-04-11 17:03:19 +00:00 |
|
Thomas Dupuy
|
209391f110
|
upd: [cluster] add ref and synonyms for Energetic Bear.
|
2022-04-07 18:26:58 +00:00 |
|
|
b649057a5a
|
chg: [handicap] fixed more fields
|
2022-04-04 11:09:30 +02:00 |
|
|
aff4345074
|
chg: [handicap] more cleanup
|
2022-04-04 11:01:38 +02:00 |
|
|
269f91ad75
|
chg: [handicap] more clean-up of uuid values
|
2022-04-04 10:56:29 +02:00 |
|
|
d3d4e7186b
|
chg: [handicap] fix name of the clusters
|
2022-04-04 10:43:56 +02:00 |
|
|
7e6390c336
|
Merge pull request #694 from AgatheMgt/main
Handicap
|
2022-04-04 10:41:06 +02:00 |
|
Rony
|
a08ddaf548
|
Add Avivore & HAZY TIGER/Bitter
|
2022-04-02 01:14:18 +05:30 |
|