MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity

Remove list from POLONIUM TA.

pull/735/head
Thomas Dupuy 2022-07-12 13:11:11 +00:00
parent a86d866534
commit 1a8835bcae
1 changed files with 2 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
clusters/threat-actor.json
View File

@ -9547,10 +9547,7 @@
"description": "Microsoft successfully detected and disabled attack activity abusing OneDrive by a previously undocumented Lebanon-based activity group Microsoft Threat Intelligence Center (MSTIC) tracks as POLONIUM.", "description": "Microsoft successfully detected and disabled attack activity abusing OneDrive by a previously undocumented Lebanon-based activity group Microsoft Threat Intelligence Center (MSTIC) tracks as POLONIUM.",
"meta": { "meta": {
"attribution-confidence": "75", "attribution-confidence": "75",
"cfr-suspected-state-sponsor": [ "cfr-suspected-state-sponsor": "Iran",
"Lebanon",
"Iran"
],
"cfr-suspected-victims": [ "cfr-suspected-victims": [
"Israel" "Israel"
], ],
@ -9565,10 +9562,7 @@
"Transportation systems" "Transportation systems"
], ],
"cfr-type-of-incident": "Espionage", "cfr-type-of-incident": "Espionage",
"country": [ "country": "IR",
"LB",
"IR"
],
"refs": [ "refs": [
"https://www.microsoft.com/security/blog/2022/06/02/exposing-polonium-activity-and-infrastructure-targeting-israeli-organizations/" "https://www.microsoft.com/security/blog/2022/06/02/exposing-polonium-activity-and-infrastructure-targeting-israeli-organizations/"
] ]