From 96749fd35029cdd865b19a63ce4987af7c0ebe8a Mon Sep 17 00:00:00 2001 From: steffenenders Date: Sun, 19 Nov 2017 19:23:10 +0100 Subject: [PATCH] Fixed mixed up description/value for MuddyWater --- clusters/threat-actor.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json index 145a9bfb..7d2d61b2 100644 --- a/clusters/threat-actor.json +++ b/clusters/threat-actor.json @@ -2228,8 +2228,8 @@ "https://researchcenter.paloaltonetworks.com/2017/11/unit42-muddying-the-water-targeted-attacks-in-the-middle-east/" ] }, - "description": "MuddyWater", - "value": "The MuddyWater attacks are primarily against Middle Eastern nations. However, we have also observed attacks against surrounding nations and beyond, including targets in India and the USA. MuddyWater attacks are characterized by the use of a slowly evolving PowerShell-based first stage backdoor we call “POWERSTATS”. Despite broad scrutiny and reports on MuddyWater attacks, the activity continues with only incremental changes to the tools and techniques." + "description": "The MuddyWater attacks are primarily against Middle Eastern nations. However, we have also observed attacks against surrounding nations and beyond, including targets in India and the USA. MuddyWater attacks are characterized by the use of a slowly evolving PowerShell-based first stage backdoor we call “POWERSTATS”. Despite broad scrutiny and reports on MuddyWater attacks, the activity continues with only incremental changes to the tools and techniques.", + "value": "MuddyWater" } ], "name": "Threat actor",