From d82ff1ecfb60df6fa7780dd2699fe6c8234d85d0 Mon Sep 17 00:00:00 2001 From: Mathieu Beligon Date: Wed, 15 Mar 2023 17:38:03 -0500 Subject: [PATCH] [threat-actors] Add Anonymous Sudan --- clusters/threat-actor.json | 20 +++++++++++++++++++- 1 file changed, 19 insertions(+), 1 deletion(-) diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json index 05f9ddb3..b73b84b1 100644 --- a/clusters/threat-actor.json +++ b/clusters/threat-actor.json @@ -10613,7 +10613,25 @@ ], "uuid": "a3c22f46-5135-4b39-a33f-92906ac12c31", "value": "TA866" + }, + { + "description": "Since January 23, 2023, a threat actor identifying as \"Anonymous Sudan\" has been conducting denial of service (DDoS) attacks against multiple organizations in Sweden. This group claims to be \"hacktivists,\" politically motivated hackers from Sudan. According to Truesec’s report, the threat actor has nothing to do with the online activists collectively known as Anonymous.", + "meta": { + "cfr-suspected-victims": [ + "Denmark", + "Sweden" + ], + "cfr-type-of-incident": [ + "Denial of service" + ], + "references": [ + "https://files.truesec.com/hubfs/Reports/Anonymous%20Sudan%20-%20Publish%201.2%20-%20a%20Truesec%20Report.pdf", + "https://www.truesec.com/hub/blog/what-is-anonymous-sudan" + ] + }, + "uuid": "8ca38564-5515-45f5-9f3b-a4091546e10b", + "value": "Anonymous Sudan" } ], - "version": 262 + "version": 263 }