MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity

add gandcrap ransomware + update references

pull/155/head
Deborah Servili 2018-02-19 15:58:47 +01:00
parent b7e8918193
commit 289e41a35b
2 changed files with 13 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
clusters/banker.json
View File

@ -165,7 +165,8 @@
"meta": { "meta": {
"refs": [ "refs": [
"https://www.proofpoint.com/us/threat-insight/post/panda-banker-new-banking-trojan-hits-the-market", "https://www.proofpoint.com/us/threat-insight/post/panda-banker-new-banking-trojan-hits-the-market",
"https://cyberwtf.files.wordpress.com/2017/07/panda-whitepaper.pdf" "https://cyberwtf.files.wordpress.com/2017/07/panda-whitepaper.pdf",
"https://www.proofpoint.com/us/threat-insight/post/zeus-panda-banking-trojan-targets-online-holiday-shoppers"
], ],
"synonyms": [ "synonyms": [
"Zeus Panda" "Zeus Panda"

11
clusters/ransomware.json
View File

@ -8707,6 +8707,17 @@
"https://objective-see.com/blog/blog_0x25.html" "https://objective-see.com/blog/blog_0x25.html"
] ]
} }
},
{
"value": "GandCrab",
"description": "A new ransomware called GandCrab was released towards the end of last week that is currently being distributed via exploit kits. GandCrab has some interesting features not seen before in a ransomware, such as being the first to accept the DASH currency and the first to utilize the Namecoin powered .BIT tld. ",
"meta": {
"date": "January 2018",
"refs": [
"https://www.bleepingcomputer.com/news/security/gandcrab-ransomware-distributed-by-exploit-kits-appends-gdcb-extension/",
"https://www.bleepingcomputer.com/news/security/gandcrab-ransomware-being-distributed-via-malspam-disguised-as-receipts/"
]
}
} }
], ],
"source": "Various", "source": "Various",