misp-galaxy/clusters/mitre-mobile-attack-intrusion-set.json

{
    "name": "Mobile Attack - intrusion Set",
    "type": "mitre-mobile-attack-intrusion-set",
    "description": "Name of ATT&CK Group",
    "version": 3,
    "source": "https://github.com/mitre/cti",
    "uuid": "02ab4018-1708-11e8-8f9d-e735aabdfa53",
    "authors": [
        "MITRE"
    ],
    "values": [
        {
            "description": "APT28 is a threat group that has been attributed to the Russian government. (Citation: FireEye APT28) (Citation: SecureWorks TG-4127) (Citation: FireEye APT28) January 2017 (Citation: GRIZZLY STEPPE JAR) This group reportedly compromised the Democratic National Committee in April 2016. (Citation: Crowdstrike DNC June 2016)",
            "value": "APT28 - G0007",
            "meta": {
                "synonyms": [
                    "APT28",
                    "Sednit",
                    "Sofacy",
                    "Pawn Storm",
                    "Fancy Bear",
                    "STRONTIUM",
                    "Tsar Team",
                    "Threat Group-4127",
                    "TG-4127"
                ],
                "refs": [
                    "https://attack.mitre.org/wiki/Group/G0007",
                    "https://www.crowdstrike.com/blog/bears-midst-intrusion-democratic-national-committee/",
                    "https://www.fireeye.com/content/dam/fireeye-www/global/en/current-threats/pdfs/rpt-apt28.pdf",
                    "https://www.secureworks.com/research/threat-group-4127-targets-hillary-clinton-presidential-campaign"
                ],
                "external_id": "G0007"
            },
            "uuid": "bef4c620-0787-42a8-a96d-b7eb6e85917c"
        }
    ]
}