248eecaef0
Kazuar: Multiplatform Espionage Backdoor with API Access added
2017-05-04 17:22:28 +02:00
f5d356523e
Duplicate references removed
2017-05-03 15:59:24 +02:00
ea611bcded
Merge pull request #49 from Delta-Sierra/master
...
reformat ransomware galaxy
2017-05-03 15:56:39 +02:00
Déborah Servili
9ff5f58978
add source to please the schema~
2017-05-03 15:21:58 +02:00
Déborah Servili
0a9814d6eb
change sources for authors
2017-05-03 15:15:34 +02:00
Déborah Servili
2dc6982fae
jq on ransomware
2017-05-03 15:09:23 +02:00
Déborah Servili
fb5eb32a0e
managing duplicate
2017-05-03 15:01:20 +02:00
Déborah Servili
8b10e3aaee
managing duplicate
2017-05-03 14:24:53 +02:00
Déborah Servili
24c6c51e4d
reformat ransomware galaxy - including http://pastebin.com/raw/GHgpWjar
2017-05-02 14:16:21 +02:00
Déborah Servili
82f4a633c0
reformat ransomware galaxy
2017-05-02 10:00:00 +02:00
35b94437e8
REDLEAVES malware added
2017-04-28 08:32:34 +02:00
Déborah Servili
c08cc781f5
update tools
2017-04-26 12:23:57 +02:00
3e4973f688
Feodo added
2017-04-25 19:56:06 +02:00
Déborah Servili
6267681362
add Cardinal RAT
2017-04-24 16:04:52 +02:00
07c82e15a5
FlexiSpy
2017-04-23 23:05:12 +02:00
52edcb1929
shadow broker leak of NSA tools from https://github.com/misterch0c/shadowbroker
2017-04-15 21:22:32 +02:00
6149740cd4
First batch of shadow broker leak (NSA name of exploit and tools) from
...
https://github.com/misterch0c/shadowbroker
2017-04-15 19:40:54 +02:00
3595d04b35
jq all
2017-04-14 16:28:43 +02:00
fa49ca127c
Merge pull request #40 from Kafeine/master
...
Updated.
2017-04-14 16:27:15 +02:00
Déborah Servili
7163e8c58c
add synonyms for Da Vinci RCS
2017-04-14 15:51:39 +02:00
Déborah Servili
531595c944
##comma##
2017-04-14 14:52:23 +02:00
Déborah Servili
54512eb840
Add some tools/threat actor
2017-04-14 14:48:39 +02:00
Kafeine
9e5db0be8c
fix
2017-04-14 13:47:16 +01:00
Kafeine
321044cdac
Update Terror
2017-04-14 13:46:59 +01:00
Kafeine
777fc1cde3
Updated
...
Blaze <-> Terror - Updated Sundown and Nebula status
2017-04-14 13:44:03 +01:00
Déborah Servili
9412519502
correct copypasta mistake
2017-04-12 16:11:57 +02:00
Déborah Servili
bbc2b79a5e
add tools from https://www.fireeye.com/blog/threat-research/2017/04/apt10_menupass_grou.html
2017-04-12 16:07:48 +02:00
Déborah Servili
8a645f42c9
update tool
2017-04-11 16:06:27 +02:00
Déborah Servili
7b5aaaeff2
json fix
2017-04-11 14:18:29 +02:00
Déborah Servili
eee2c6d6b5
update tool's galaxy using http://contagiodump.blogspot.lu/2013/03/mandiant-apt1-samples-categorized-by.html
2017-04-11 14:09:44 +02:00
bbf6716c73
Longhorn (CIA) added
2017-04-10 20:22:57 +02:00
ab5b73a3cd
Sathurbot added
2017-04-06 20:49:53 +02:00
8c09223477
The product from NSO Group Technologies added to the list of tools.
...
The Pegasus name is used as synonym of Chrysaor ;-)
2017-04-04 20:42:08 +02:00
0578d7b7b1
The mysterious ZIRCONIUM activity group added
2017-04-03 19:44:36 +02:00
nyx0
78cdb10aae
Add new Sednit name according to https://www.secureworks.com/research/iron-twilight-supports-active-measures
2017-03-31 09:28:50 -04:00
b3f1069686
Trochilus and MoonWind RATs added
2017-03-30 15:01:23 +02:00
f0e42a1818
KHRAT added
2017-03-29 16:37:31 +02:00
chrisdoman
dbf989c742
Added descriptions and reference to threat-actor json
2017-03-22 12:52:05 +00:00
Raphaël Vinot
1ed0558c07
Merge branch 'master' into master
2017-03-16 17:38:59 +01:00
Raphaël Vinot
e1b5701351
JQ all the things
2017-03-16 17:31:43 +01:00
Raphaël Vinot
0d8d265319
Fix typo.
2017-03-16 17:27:17 +01:00
CERT-Bund
4112a041f7
Added groups, joined groups, added synonyms (see extended description)
...
Added: HammerPanda, Barium, Infy, Sima, Groundbait
Joined: StrongPity and Promethium
Synonyms: Lead as Winnti, Moonlight as MoleRats, FalloutTeam as DarkHotel, DustStorm as StonePanda, Skipper and Popeye as Pacifier
2017-03-16 17:02:55 +01:00
71ad9099c4
IMEIJ added
2017-03-13 13:59:46 +01:00
Kafeine
73a82418df
Empire status, Nebula, Blaze/Terror
2017-03-02 21:29:19 +00:00
e002e62204
missing \n at the end of the file
2017-03-01 14:55:45 +01:00
Chris Doman
9e5c983a65
Ran jq
2017-03-01 13:24:00 +00:00
Chris Doman
e934f88b3b
Added references
...
Mostly added references to existing groups
Capitalised DarkHotel, put a space in APT30 default name (the others
had that)
2017-03-01 12:53:52 +00:00
a224c7ce5e
add: Gamaredon Group added
2017-02-28 09:17:33 +01:00
Christophe Vandeplas
048b831f53
minor correction
2017-02-27 11:00:48 +01:00
Thanat0s
07cc13feb8
remove duplicate of ratdecode import
2017-02-27 00:38:39 +01:00
