added suspected victims to Gelsemium

2023-10-13 10:53:36 +02:00 · 2023-10-13 10:53:36 +02:00 · 613e9feb12
parent f9d6386c35
commit 613e9feb12
1 changed files with 20 additions and 0 deletions
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@ -9606,6 +9606,26 @@
          "Universities",
          "Religious organization"
        ],
+        "cfr-suspected-victims": [
+          "North Korea",
+          "South Korea",
+          "Japan",
+          "China",
+          "Mongolia",
+          "Egypt",
+          "Saudi Arabia",
+          "Yemen",
+          "Oman",
+          "Iran",
+          "Iraq",
+          "Kuwait",
+          "Israel",
+          "Jordan",
+          "Gaza",
+          "Syria",
+          "Turkey",
+          "Lebanon"
+        ],
        "refs": [
          "https://www.welivesecurity.com/2021/06/09/gelsemium-when-threat-actors-go-gardening/",
          "https://www.venustech.com.cn/uploads/2018/08/231401512426.pdf",