mirror of https://github.com/MISP/misp-galaxy
chg: RANCOR group added
parent
1ae075acca
commit
cd53272470
|
@ -2711,6 +2711,16 @@
|
|||
]
|
||||
},
|
||||
"uuid": "1533bc1a-745a-11e8-90e3-efa3e975fef3s"
|
||||
},
|
||||
{
|
||||
"value": "RANCOR",
|
||||
"description": "The Rancor group’s attacks use two primary malware families which we describe in depth later in this blog and are naming DDKONG and PLAINTEE. DDKONG is used throughout the campaign and PLAINTEE appears to be new addition to these attackers’ toolkit.",
|
||||
"meta": {
|
||||
"refs": [
|
||||
"https://researchcenter.paloaltonetworks.com/2018/06/unit42-rancor-targeted-attacks-south-east-asia-using-plaintee-ddkong-malware-families/"
|
||||
]
|
||||
},
|
||||
"uuid": "14e7266a-6dd8-4000-8951-4bd93e357d4b"
|
||||
}
|
||||
],
|
||||
"name": "Threat actor",
|
||||
|
@ -2725,5 +2735,5 @@
|
|||
],
|
||||
"description": "Known or estimated adversary groups targeting organizations and employees. Adversary groups are regularly confused with their initial operation or campaign.",
|
||||
"uuid": "7cdff317-a673-4474-84ec-4f1754947823",
|
||||
"version": 43
|
||||
"version": 44
|
||||
}
|
||||
|
|
Loading…
Reference in New Issue