From 2d8e9ea3649f5aa2af69a6a82d036f6bec4a9878 Mon Sep 17 00:00:00 2001 From: Daniel Plohmann Date: Wed, 31 Mar 2021 22:35:12 +0200 Subject: [PATCH] Symantec uses Palmerworm as alias for BlackTech Adding Palmerworm as Symantec alias for BlackTech (with reference). --- clusters/threat-actor.json | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json index 210060b..8d15715 100644 --- a/clusters/threat-actor.json +++ b/clusters/threat-actor.json @@ -7406,12 +7406,14 @@ "https://www.welivesecurity.com/2018/07/09/certificates-stolen-taiwanese-tech-companies-plead-malware-campaign/", "https://www.welivesecurity.com/2019/05/14/plead-malware-mitm-asus-webstorage/", "https://go.crowdstrike.com/rs/281-OBQ-266/images/Report2020CrowdStrikeGlobalThreatReport.pdf", - "https://www.slideshare.net/codeblue_jp/cb19-cyber-threat-landscape-in-japan-revealing-threat-in-the-shadow-by-chi-en-shen-ashley-oleg-bondarenko" + "https://www.slideshare.net/codeblue_jp/cb19-cyber-threat-landscape-in-japan-revealing-threat-in-the-shadow-by-chi-en-shen-ashley-oleg-bondarenko", + "https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/palmerworm-blacktech-espionage-apt" ], "synonyms": [ "CIRCUIT PANDA", "Temp.Overboard", - "HUAPI" + "HUAPI", + "Palmerworm" ] }, "uuid": "320c42f7-eab7-4ef9-b09a-74396caa6c3e",