Merge pull request #700 from nyx0/main

upd: [cluster] add Threat Actor BladeHawk.
2022-04-13 08:58:24 +02:00 · 2022-04-13 08:58:24 +02:00 · 93b260f3c6
parent 5b68aaebd0 bd05eb0bba
commit 93b260f3c6
1 changed files with 21 additions and 1 deletions
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@ -9104,7 +9104,27 @@
      },
      "uuid": "ef59014b-79bb-408f-97f1-3c585a240ca7",
      "value": "Scarab"
+    },
+    {
+      "description": "",
+      "meta": {
+        "cfr-suspected-victims": [
+          "Kurdistan"
+        ],
+        "cfr-target-category": [
+          "Government"
+        ],
+        "cfr-type-of-incident": "Espionage",
+        "refs": [
+          "https://www.welivesecurity.com/2021/09/07/bladehawk-android-espionage-kurdish/",
+          "https://telegra.ph/Discover-Malware-Android-03-26",
+          "https://ti.qianxin.com/blog/articles/Blade-hawk-The-activities-of-targeted-the-Middle-East-and-West-Asia-are-exposed/"
+        ],
+        "synonyms": []
+      },
+      "uuid": "0d72c57c-73e3-4739-8144-c8055cabd7dc",
+      "value": "BladeHawk"
    }
  ],
-  "version": 216
+  "version": 217
 }