Merge pull request #276 from Delta-Sierra/master

add CoalaBot + Kraken Cryptor Ransmware + refs

clusters/exploit-kit.json

@@ -45,7 +45,8 @@
       "meta": {
         "refs": [
           "https://www.nao-sec.org/2018/09/hello-fallout-exploit-kit.html",
-          "https://www.bleepingcomputer.com/news/security/new-fallout-exploit-kit-drops-gandcrab-ransomware-or-redirects-to-pups/"
+          "https://www.bleepingcomputer.com/news/security/new-fallout-exploit-kit-drops-gandcrab-ransomware-or-redirects-to-pups/",
+          "https://www.bleepingcomputer.com/news/security/fallout-exploit-kit-now-installing-the-kraken-cryptor-ransomware/"
         ],
         "status": "Active",
         "synonyms": [

clusters/ransomware.json

@@ -10583,7 +10583,18 @@
         ]
       },
       "uuid": "2aa481fe-c254-11e8-ad1c-efee78419960"
+    },
+    {
+      "value": "Kraken Cryptor Ransomware",
+      "description": "The Kraken Cryptor Ransomware is a newer ransomware that was released in August 2018. A new version, called Kraken Cryptor 1.5, was recently released that is masquerading as the legitimate SuperAntiSpyware anti-malware program in order to trick users into installing it. ",
+      "meta": {
+        "refs": [
+          "https://www.bleepingcomputer.com/news/security/fallout-exploit-kit-now-installing-the-kraken-cryptor-ransomware/",
+          "https://www.bleepingcomputer.com/news/security/kraken-cryptor-ransomware-masquerading-as-superantispyware-security-program/"
+        ]
+      },
+      "uuid": "c49f88f6-c87d-11e8-b005-d76e8162ced5"
     }
   ],
-  "version": 34
+  "version": 35
 }

clusters/tool.json

@@ -5874,7 +5874,16 @@
         ]
       },
       "uuid": "8a2ae47a-c7b2-11e8-b223-ab4d8f78f3ef"
+    },
+    {
+      "value": "CoalaBot",
+      "meta": {
+        "refs:": [
+          "https://malware.dontneedcoffee.com/2017/10/coalabot-http-ddos-bot.html"
+        ]
+      },
+      "uuid": "92628a72-c874-11e8-a094-ebbb3bd1f412"
     }
   ],
-  "version": 92
+  "version": 93
 }