From 0daeb675f5a06cca1d904be9f31736e9f7a43478 Mon Sep 17 00:00:00 2001 From: Thomas Dupuy Date: Tue, 18 Feb 2020 13:28:32 -0500 Subject: [PATCH] Add InvisiMole cluster --- clusters/threat-actor.json | 19 ++++++++++++++++++- 1 file changed, 18 insertions(+), 1 deletion(-) diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json index 00da6c4..836c812 100644 --- a/clusters/threat-actor.json +++ b/clusters/threat-actor.json @@ -7948,7 +7948,24 @@ }, "uuid": "53771ca5-f1cb-47b6-a92a-53a485307cf7", "value": "APT-C-12" + }, + { + "description": "Adversary group targeting diplomatic missions, governmental and military organisations, mainly in Ukraine.", + "meta": { + "cfr-suspected-victims": [ + "Ukraine" + ], + "cfr-target-category": [ + "Government" + ], + "cfr-type-of-incident": "Espionage", + "refs": [ + "https://www.welivesecurity.com/2018/06/07/invisimole-equipped-spyware-undercover/" + ] + }, + "uuid": "87af83a4-ced4-4e7c-96a6-86612dc095b1", + "value": "InvisiMole" } ], - "version": 154 + "version": 155 }