From 120f5c9b3f18381268004173e14b4dd2336905b6 Mon Sep 17 00:00:00 2001 From: Mathieu4141 Date: Wed, 27 Mar 2024 05:09:24 -0700 Subject: [PATCH] [threat-actors] Add Lazarus Group aliases --- clusters/threat-actor.json | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json index b308faa..a3fedc2 100644 --- a/clusters/threat-actor.json +++ b/clusters/threat-actor.json @@ -3238,7 +3238,9 @@ "https://www.microsoft.com/en-us/security/blog/2022/12/06/dev-0139-launches-targeted-attacks-against-the-cryptocurrency-industry/", "https://www.proofpoint.com/us/blog/threat-insight/ta444-apt-startup-aimed-at-your-funds", "https://www.proofpoint.com/us/blog/threat-insight/above-fold-and-your-inbox-tracing-state-aligned-activity-targeting-journalists", - "https://www.bsi.bund.de/DE/Themen/Unternehmen-und-Organisationen/Cyber-Sicherheitslage/Analysen-und-Prognosen/Threat-Intelligence/Aktive_APT-Gruppen/aktive-apt-gruppen_node.html" + "https://www.bsi.bund.de/DE/Themen/Unternehmen-und-Organisationen/Cyber-Sicherheitslage/Analysen-und-Prognosen/Threat-Intelligence/Aktive_APT-Gruppen/aktive-apt-gruppen_node.html", + "https://www.securonix.com/blog/securonix-threat-labs-monthly-intelligence-insights-june-2023/", + "https://us-cert.cisa.gov/ncas/alerts/aa21-048a" ], "synonyms": [ "Operation DarkSeoul", @@ -3278,7 +3280,8 @@ "Sapphire Sleet", "COPERNICIUM", "TA404", - "Lazarus group" + "Lazarus group", + "BeagleBoyz" ] }, "related": [