From d9af67d1dfedc4ec637d79e4e40755d11f23a15c Mon Sep 17 00:00:00 2001
From: Mathieu4141 <mathieu@feedly.com>
Date: Wed, 24 Jul 2024 03:39:38 -0700
Subject: [PATCH] [threat-actors] Add Threat Actor 888

---
 clusters/threat-actor.json | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index d30ad43c..1a044f0f 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -16399,6 +16399,19 @@
       },
       "uuid": "000d8bbf-cb6f-4f7b-89a4-9c136ac4bc5a",
       "value": "Nullbulge"
+    },
+    {
+      "description": "Threat actor 888 is a hacker active in 2024, targeting companies for data breaches. They've hit Microsoft, BMW (Hong Kong), and others in tech, freight, and oil & gas industries",
+      "meta": {
+        "refs": [
+          "https://cybersecuritynews.com/threats-claimimg-breach/",
+          "https://www.cloudways.com/blog/hacker-allegedly-leaks-data-from-shopify-breach-on-breachforums/",
+          "https://twitter.com/H4ckManac/status/1810569160180515171",
+          "https://medium.com/@DoingFedTime/80-000-records-exposed-in-shell-data-breach-by-threat-actor-888-64c407dfac94"
+        ]
+      },
+      "uuid": "8f31b9b1-44c9-4b7f-b850-7cf02c306e25",
+      "value": "Threat Actor 888"
     }
   ],
   "version": 312