MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity

adding secureworks actor names for energetic bear and teamspy

pull/429/head
Daniel Plohmann 2019-07-31 14:35:09 +02:00 committed by GitHub
parent dbb67dd7d2
commit 0367e16ce0
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
clusters/threat-actor.json
View File

@ -2634,7 +2634,8 @@
"https://www.symantec.com/blogs/threat-intelligence/dragonfly-energy-sector-cyber-attacks",
"https://www.kaspersky.com/resource-center/threats/crouching-yeti-energetic-bear-malware-threat",
"https://www.sans.org/reading-room/whitepapers/ICS/impact-dragonfly-malware-industrial-control-systems-36672",
"https://attack.mitre.org/groups/G0035/"
"https://attack.mitre.org/groups/G0035/",
"https://www.secureworks.com/research/resurgent-iron-liberty-targeting-energy-sector"
],
"synonyms": [
"Dragonfly",
@ -2642,7 +2643,8 @@
"Group 24",
"Havex",
"CrouchingYeti",
"Koala Team"
"Koala Team",
"IRON LIBERTY"
]
},
"related": [
@ -2857,13 +2859,15 @@
"https://www.cfr.org/interactive/cyber-operations/team-spy-crew",
"https://threatpost.com/researchers-uncover-teamspy-attack-campaign-targeting-government-research-targets-032013/77646/",
"https://www.crysys.hu/publications/files/teamspy.pdf",
"https://d2538mqrb7brka.cloudfront.net/wp-content/uploads/sites/43/2018/03/20134928/theteamspystory_final_t2.pdf"
"https://d2538mqrb7brka.cloudfront.net/wp-content/uploads/sites/43/2018/03/20134928/theteamspystory_final_t2.pdf",
"https://www.secureworks.com/research/resurgent-iron-liberty-targeting-energy-sector"
],
"synonyms": [
"TeamSpy",
"Team Bear",
"Berserk Bear",
"Anger Bear"
"Anger Bear",
"IRON LYRIC"
]
},
"related": [
@ -7624,5 +7628,5 @@
"value": "SWEED"
}
],
"version": 122
"version": 124
}