new: [threat-actor] hezb added

2022-09-14 11:00:33 +02:00 · 2022-09-14 11:00:33 +02:00 · 1c8d82cfcc
parent 000cd8c385
commit 1c8d82cfcc
1 changed files with 11 additions and 1 deletions
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@ -9725,7 +9725,17 @@
      },
      "uuid": "1bb64526-cc51-475a-b6bc-af30df9f2fb6",
      "value": "DangerousSavanna"
+    },
+    {
+      "description": "Hezb is a group deploying cryptominers when new exploit are available for public facing vulnerabilities. The name is after the miner process they deploy.",
+      "meta": {
+        "refs": [
+          "https://www.pwndefend.com/2022/06/04/cve-2022-26134-honeypot-payload-analysis-example/"
+        ]
+      },
+      "uuid": "fd82cd40-9306-4285-8fae-ad29a9711603",
+      "value": "Hezb"
    }
  ],
-  "version": 246
+  "version": 247
 }