MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity

Merge pull request #65 from danielplohmann/hidden-cobra-lazarus 

added Hidden Cobra as alias for Lazarus Group
pull/66/head
Alexandre Dulaunoy 2017-06-15 14:17:04 +02:00 committed by GitHub
parent af81818018 5724f19873
commit 7a65208c9f
1 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
clusters/threat-actor.json
View File

@ -952,13 +952,16 @@
"meta": {
"country": "KP",
"synonyms": [
"Operation DarkSeoul"
"Operation DarkSeoul",
"Hidden Cobra"
],
"refs": [
"https://threatpost.com/operation-blockbuster-coalition-ties-destructive-attacks-to-lazarus-group/116422/"
"https://threatpost.com/operation-blockbuster-coalition-ties-destructive-attacks-to-lazarus-group/116422/",
"https://www.us-cert.gov/ncas/alerts/TA17-164A"
]
},
"value": "Lazarus Group"
"value": "Lazarus Group",
"description": "Since 2009, HIDDEN COBRA actors have leveraged their capabilities to target and compromise a range of victims; some intrusions have resulted in the exfiltration of data while others have been disruptive in nature. Commercial reporting has referred to this activity as Lazarus Group and Guardians of Peace. Tools and capabilities used by HIDDEN COBRA actors include DDoS botnets, keyloggers, remote access tools (RATs), and wiper malware. Variants of malware and tools used by HIDDEN COBRA actors include Destover, Duuzer, and Hangman."
},
{
"meta": {