MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity

Merge pull request #103 from Delta-Sierra/master 

add Formbook
pull/104/head
Deborah Servili 2017-10-27 10:40:00 +02:00 committed by GitHub
parent 24e7d89ac9 2533c1b54e
commit ad9fff6c3f
1 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
clusters/tool.json
View File

@ -10,7 +10,7 @@
], ],
"description": "threat-actor-tools is an enumeration of tools used by adversaries. The list includes malware but also common software regularly used by the adversaries.", "description": "threat-actor-tools is an enumeration of tools used by adversaries. The list includes malware but also common software regularly used by the adversaries.",
"uuid": "0d821b68-9d82-4c6d-86a6-1071a9e0f79f", "uuid": "0d821b68-9d82-4c6d-86a6-1071a9e0f79f",
"version": 34, "version": 35,
"values": [ "values": [
{ {
"meta": { "meta": {
@ -2992,6 +2992,16 @@
"http://blog.netlab.360.com/iot_reaper-a-rappid-spreading-new-iot-botnet-en/" "http://blog.netlab.360.com/iot_reaper-a-rappid-spreading-new-iot-botnet-en/"
] ]
} }
},
{
"value": "FormBook",
"description": "FormBook is a data stealer and form grabber that has been advertised in various hacking forums since early 2016.",
"meta": {
"refs": [
"https://www.fireeye.com/blog/threat-research/2017/10/formbook-malware-distribution-campaigns.html",
"https://www.arbornetworks.com/blog/asert/formidable-formbook-form-grabber/"
]
}
} }
] ]
} }