From 152ab38b1080aa7e78f52a66d1e301590865340d Mon Sep 17 00:00:00 2001
From: Mathieu4141 <mathieu@feedly.com>
Date: Mon, 6 Nov 2023 05:26:26 -0800
Subject: [PATCH] [threat-actors] Add GhostSec

---
 clusters/threat-actor.json | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 3b0c82d6..b55b01ae 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -12416,6 +12416,20 @@
       },
       "uuid": "79e826b0-b051-4a61-b38c-496021b3afdb",
       "value": "IndigoZebra"
+    },
+    {
+      "description": "GhostSec is a hacktivist group that emerged as an offshoot of Anonymous. They primarily focused on counterterrorism efforts and monitoring online activities associated with terrorism. They gained prominence following the 2015 Charlie Hebdo shooting in Paris and the rise of ISIS.",
+      "meta": {
+        "aliases": [
+          "Ghost Security"
+        ],
+        "refs": [
+          "https://www.uptycs.com/blog/ghostlocker-ransomware-ghostsec",
+          "https://forescoutstage.wpengine.com/blog/the-increasing-threat-posed-by-hacktivist-attacks-an-analysis-of-targeted-organizations-devices-and-ttps/"
+        ]
+      },
+      "uuid": "a1315451-326f-4185-8d71-80f9243f395f",
+      "value": "GhostSec"
     }
   ],
   "version": 289