Pimp nettraveler

2017-02-26 19:21:41 +01:00 · 2017-02-26 19:21:41 +01:00 · 8de827977c
parent 7d62d8c3e7
commit 8de827977c
1 changed files with 14 additions and 1 deletions
--- a/clusters/tool.json
+++ b/clusters/tool.json
@ -355,7 +355,20 @@
      }
    },
    {
-      "value": "NetTraveler"
+      "value": "NetTraveler",
+       "description": "APT that infected hundreds of high profile victims in more than 40 countries. Known targets of NetTraveler include Tibetan/Uyghur activists, oil industry companies, scientific research centers and institutes, universities, private companies, governments and governmental institutions, embassies and military contractors.",
+      "meta": {
+        "synonyms": [
+          "TravNet",
+          "Netfile"
+        ],
+        "refs": [
+          "https://securelist.com/blog/incidents/57455/nettraveler-is-back-the-red-star-apt-returns-with-new-tricks/"
+        ],
+        "type": [
+          "Backdoor"
+        ]
+      }
    },
    {
      "value": "Winnti"