MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [threat-actor] jq all the things

pull/988/head
Alexandre Dulaunoy 2024-06-02 09:30:18 +02:00
parent ab6be85bc0
commit 97fd1ed309
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
clusters/threat-actor.json
View File

@ -8967,7 +8967,6 @@
{ {
"description": "An actor mainly targeting Pakistan military targets, active since at least 2012. We have low confidence that this malware might be authored by an Indian company. To spread the malware, they use unique implementations to leverage the exploits of known vulnerabilities (such as CVE-2017-11882) and later deploy a Powershell payload in the final stages.", "description": "An actor mainly targeting Pakistan military targets, active since at least 2012. We have low confidence that this malware might be authored by an Indian company. To spread the malware, they use unique implementations to leverage the exploits of known vulnerabilities (such as CVE-2017-11882) and later deploy a Powershell payload in the final stages.",
"meta": { "meta": {
"country": "IN",
"cfr-suspected-state-sponsor": "India", "cfr-suspected-state-sponsor": "India",
"cfr-suspected-victims": [ "cfr-suspected-victims": [
"China", "China",
@ -8980,6 +8979,7 @@
"Military", "Military",
"Private Sector" "Private Sector"
], ],
"country": "IN",
"refs": [ "refs": [
"https://securelist.com/apt-trends-report-q1-2018/85280/", "https://securelist.com/apt-trends-report-q1-2018/85280/",
"https://blog.trendmicro.com/trendlabs-security-intelligence/first-active-attack-exploiting-cve-2019-2215-found-on-google-play-linked-to-sidewinder-apt-group/", "https://blog.trendmicro.com/trendlabs-security-intelligence/first-active-attack-exploiting-cve-2019-2215-found-on-google-play-linked-to-sidewinder-apt-group/",