MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity

added APT38 as (FireEye) alias for Lazarus 

cross-references in https://content.fireeye.com/apt/rpt-apt38 suggest the link to Lazarus.
pull/297/head
Daniel Plohmann 2018-11-07 17:19:50 +01:00 committed by GitHub
parent 954264c084
commit 1f6b606f75
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
clusters/threat-actor.json
View File

@ -2637,7 +2637,8 @@
"https://www.cfr.org/interactive/cyber-operations/operation-ghostsecret", "https://www.cfr.org/interactive/cyber-operations/operation-ghostsecret",
"https://securelist.com/operation-applejeus/87553/", "https://securelist.com/operation-applejeus/87553/",
"https://www.cfr.org/interactive/cyber-operations/compromise-cryptocurrency-exchanges-south-korea", "https://www.cfr.org/interactive/cyber-operations/compromise-cryptocurrency-exchanges-south-korea",
"https://www.bleepingcomputer.com/news/security/lazarus-group-deploys-its-first-mac-malware-in-cryptocurrency-exchange-hack/" "https://www.bleepingcomputer.com/news/security/lazarus-group-deploys-its-first-mac-malware-in-cryptocurrency-exchange-hack/",
"https://content.fireeye.com/apt/rpt-apt38"
], ],
"synonyms": [ "synonyms": [
"Operation DarkSeoul", "Operation DarkSeoul",
@ -2653,7 +2654,8 @@
"Labyrinth Chollima", "Labyrinth Chollima",
"Operation Troy", "Operation Troy",
"Operation GhostSecret", "Operation GhostSecret",
"Operation AppleJeus" "Operation AppleJeus",
"APT38"
] ]
}, },
"related": [ "related": [
@ -5999,5 +6001,5 @@
"value": "EvilTraffic" "value": "EvilTraffic"
} }
], ],
"version": 76 "version": 77
} }