From e95fbb571d6ac5314af51e55a503deb61cc4112a Mon Sep 17 00:00:00 2001 From: StefanKelm Date: Fri, 25 Sep 2020 11:52:34 +0200 Subject: [PATCH] Update threat-actor.json GADOLINIUM --- clusters/threat-actor.json | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json index 733c5f0..8863956 100644 --- a/clusters/threat-actor.json +++ b/clusters/threat-actor.json @@ -5813,7 +5813,8 @@ "https://intrusiontruth.wordpress.com/2020/01/15/hainan-xiandun-technology-company-is-apt40", "https://www.secureworks.com/research/threat-profiles/bronze-mohawk", "https://www.mycert.org.my/portal/advisory?id=MA-774.022020", - "https://www.elastic.co/blog/advanced-techniques-used-in-malaysian-focused-apt-campaign" + "https://www.elastic.co/blog/advanced-techniques-used-in-malaysian-focused-apt-campaign", + "https://www.microsoft.com/security/blog/2020/09/24/gadolinium-detecting-empires-cloud/" ], "synonyms": [ "TEMP.Periscope", @@ -8388,5 +8389,5 @@ "value": "Fox Kitten" } ], - "version": 180 + "version": 181 }