From 662cc5a012b1ec6bfffa53af1b5efcea7898eb0e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jo=C3=A3o=20Neto?= Date: Fri, 8 Feb 2019 16:50:22 +0100 Subject: [PATCH] Updated "Iran" name This extra space leads to an unnecessary key error when parsing the json file --- clusters/threat-actor.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json index b38e277..7102944 100644 --- a/clusters/threat-actor.json +++ b/clusters/threat-actor.json @@ -1561,7 +1561,7 @@ { "description": "While tracking a suspected Iran-based threat group known as Threat Group-2889[1] (TG-2889), Dell SecureWorks Counter Threat Unit™ (CTU) researchers uncovered a network of fake LinkedIn profiles. These convincing profiles form a self-referenced network of seemingly established LinkedIn users. CTU researchers assess with high confidence the purpose of this network is to target potential victims through social engineering. Most of the legitimate LinkedIn accounts associated with the fake accounts belong to individuals in the Middle East, and CTU researchers assess with medium confidence that these individuals are likely targets of TG-2889. One of the threat actors responsible for the denial of service attacks against U.S in 2012–2013. Three individuals associated with the group—believed to be have been working on behalf of Iran’s Islamic Revolutionary Guard Corps—were indicted by the Justice Department in 2016. ", "meta": { - "cfr-suspected-state-sponsor": " Iran (Islamic Republic of)", + "cfr-suspected-state-sponsor": "Iran (Islamic Republic of)", "cfr-suspected-victims": [ "Bank of America", "US Bancorp",