MISP
/
misp-galaxy
mirror of https://github.com/MISP/misp-galaxy
2
0
Fork 0
Code Issues Releases Wiki Activity

chg: [threat-actor] JSON fix

pull/774/head
Alexandre Dulaunoy 2022-09-27 08:18:13 +02:00
parent 067e449a41
commit c3b65a2d15
No known key found for this signature in database
GPG Key ID: 09E2CD4944E6CBCD
1 changed files with 14 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
clusters/threat-actor.json
View File

@ -9801,26 +9801,26 @@
{
"description": "Void Balaur is a highly active hack-for-hire / cyber mercenary group with a wide range of known target types across the globe. Their services have been observed for sale to the public online since at least 2016. Services include the collection of private data and access to specific online email and social media services, such as Gmail, Outlook, Telegram, Yandex, Facebook, Instagram, and business emails.",
"meta": {
"cfr-suspected-victims": [
"Brazil",
"Central African Republic",
"Georgia",
"Kazakhstan",
"Moldova",
"Russia",
"Spain",
"Sudan",
"Taiwan",
"Ukraine",
"United Kingdom",
"United States"
],
"refs": [
"https://www.sentinelone.com/labs/the-sprawling-infrastructure-of-a-careless-mercenary/",
"https://blog.google/threat-analysis-group/countering-hack-for-hire-groups/",
"https://documents.trendmicro.com/assets/white_papers/wp-void-balaur-tracking-a-cybermercenarys-activities.pdf",
"https://www.amnesty.org/en/latest/research/2020/03/targeted-surveillance-attacks-in-uzbekistan-an-old-threat-with-new-techniques/",
"https://equalit.ie/deflect-labs-report-6/"
],
"cfr-suspected-victims": [
"Brazil",
"Central African Republic",
"Georgia",
"Kazakhstan",
"Moldova",
"Russia",
"Spain",
"Sudan",
"Taiwan",
"Ukraine",
"United Kingdom",
"United States"
]
},
"uuid": "ca310f0a-1131-4c67-b0a7-f1cd4ce0f87f",