Pimp Pirpi. Hard to say:)

2017-02-26 19:56:17 +01:00 · 2017-02-26 19:56:17 +01:00 · ca68abc0e8
parent 6e78746a6c
commit ca68abc0e8
1 changed files with 8 additions and 0 deletions
--- a/clusters/tool.json
+++ b/clusters/tool.json
@ -417,9 +417,17 @@
    },
    {
      "value": "Pirpi",
+      "description": "Symantec has observed Buckeye activity dating back to 2009, involving attacks on various organizations in several regions. Buckeye used a remote access Trojan (Backdoor.Pirpi) in attacks against a US organization’s network in 2009. The group delivered Backdoor.Pirpi through malicious attachments or links in convincing spear-phishing emails.",
      "meta": {
+        "synonyms": [
+          "Badey",
+          "EXL"
+        ],
        "refs": [
          "http://www.symantec.com/connect/blogs/buckeye-cyberespionage-group-shifts-gaze-us-hong-kong"
+        ],
+        "type": [
+          "Backdoor"
        ]
      }
    },