misp-galaxy/clusters/mitre-mobile-attack-intrusion-set.json

{
  "name": "Mobile Attack - intrusion Set",
  "type": "mitre-mobile-attack-intrusion-set",
  "description": "Name of ATT&CK Group",
  "version": 1,
  "source": "https://github.com/mitre/cti",
  "uuid": "02ab4018-1708-11e8-8f9d-e735aabdfa53",
  "authors": [
    "MITRE"
  ],
  "values": [
    {
      "description": "APT28 is a threat group that has been attributed to the Russian government. (Citation: FireEye APT28) (Citation: SecureWorks TG-4127) (Citation: FireEye APT28) January 2017 (Citation: GRIZZLY STEPPE JAR) This group reportedly compromised the Democratic National Committee in April 2016. (Citation: Crowdstrike DNC June 2016)",
      "value": "APT28",
      "meta": {
        "synonyms": [
          "APT28",
          "Sednit",
          "Sofacy",
          "Pawn Storm",
          "Fancy Bear",
          "STRONTIUM",
          "Tsar Team",
          "Threat Group-4127",
          "TG-4127"
        ],
        "refs": [
          "https://attack.mitre.org/wiki/Group/G0007",
          "https://www.crowdstrike.com/blog/bears-midst-intrusion-democratic-national-committee/",
          "https://www.fireeye.com/content/dam/fireeye-www/global/en/current-threats/pdfs/rpt-apt28.pdf",
          "https://www.secureworks.com/research/threat-group-4127-targets-hillary-clinton-presidential-campaign"
        ]
      },
      "uuid": "bef4c620-0787-42a8-a96d-b7eb6e85917c"
    }
  ]
}