Merge pull request #792 from nyx0/main

Add RomCom TA.
2022-11-05 07:50:20 +01:00 · 2022-11-05 07:50:20 +01:00 · b787bbeb23
parent 3b196f8361 9ac53e5d5e
commit b787bbeb23
1 changed files with 12 additions and 1 deletions
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@ -9860,7 +9860,18 @@
      },
      "uuid": "6a83b2bf-0c51-4c9b-89b0-35df7cab1dd5",
      "value": "APT-Q-12"
+    },
+    {
+      "description": "RomCom",
+      "meta": {
+        "refs": [
+          "https://blogs.blackberry.com/en/2022/11/romcom-spoofing-solarwinds-keepass",
+          "https://blogs.blackberry.com/en/2022/10/unattributed-romcom-threat-actor-spoofing-popular-apps-now-hits-ukrainian-militaries"
+        ]
+      },
+      "uuid": "ba9e1ed2-e142-48d0-a593-f73ac6d59ccd",
+      "value": "RomCom"
    }
  ],
-  "version": 250
+  "version": 251
 }