Commit Graph

535 Commits (381b60890085c21bc6136fea6a9148c53c965f33)

Author SHA1 Message Date
Raphaël Vinot 8e5469c125 Merge pull request #48 from Delta-Sierra/master
add Cardinal RAT
2017-04-27 21:47:10 +03:00
Déborah Servili c08cc781f5 update tools 2017-04-26 12:23:57 +02:00
Alexandre Dulaunoy 3e4973f688 Feodo added 2017-04-25 19:56:06 +02:00
Déborah Servili 6267681362 add Cardinal RAT 2017-04-24 16:04:52 +02:00
Alexandre Dulaunoy 07c82e15a5 FlexiSpy 2017-04-23 23:05:12 +02:00
Alexandre Dulaunoy 52edcb1929 shadow broker leak of NSA tools from https://github.com/misterch0c/shadowbroker 2017-04-15 21:22:32 +02:00
Alexandre Dulaunoy 6149740cd4 First batch of shadow broker leak (NSA name of exploit and tools) from
https://github.com/misterch0c/shadowbroker
2017-04-15 19:40:54 +02:00
Alexandre Dulaunoy 3595d04b35 jq all 2017-04-14 16:28:43 +02:00
Alexandre Dulaunoy fa49ca127c Merge pull request #40 from Kafeine/master
Updated.
2017-04-14 16:27:15 +02:00
Alexandre Dulaunoy 519681dae2 Merge pull request #47 from Delta-Sierra/master
add synonyms for Da Vinci RCS
2017-04-14 16:13:37 +02:00
Déborah Servili 7163e8c58c add synonyms for Da Vinci RCS 2017-04-14 15:51:39 +02:00
Alexandre Dulaunoy 4611b1b6c9 Merge pull request #46 from Delta-Sierra/master
Add some tools/threat actor
2017-04-14 15:04:44 +02:00
Déborah Servili ea45eb2383 Merge https://github.com/MISP/misp-galaxy 2017-04-14 14:55:15 +02:00
Déborah Servili 531595c944 ##comma## 2017-04-14 14:52:23 +02:00
Déborah Servili 54512eb840 Add some tools/threat actor 2017-04-14 14:48:39 +02:00
Kafeine 9e5db0be8c fix 2017-04-14 13:47:16 +01:00
Kafeine 321044cdac Update Terror 2017-04-14 13:46:59 +01:00
Kafeine 777fc1cde3 Updated
Blaze <-> Terror - Updated Sundown and Nebula status
2017-04-14 13:44:03 +01:00
Alexandre Dulaunoy 48b3f3c269 Merge pull request #45 from Delta-Sierra/master
add tools from https://www.fireeye.com/blog/threat-research/2017/04/apt10_menupass_grou.html
2017-04-12 16:24:09 +02:00
Déborah Servili 9412519502 correct copypasta mistake 2017-04-12 16:11:57 +02:00
Déborah Servili 51042422ef Merge https://github.com/MISP/misp-galaxy 2017-04-12 16:08:38 +02:00
Déborah Servili bbc2b79a5e add tools from https://www.fireeye.com/blog/threat-research/2017/04/apt10_menupass_grou.html 2017-04-12 16:07:48 +02:00
Alexandre Dulaunoy b39bebadae Merge pull request #44 from Delta-Sierra/master
Update tool's galaxy
2017-04-11 21:41:32 +02:00
Déborah Servili 8a645f42c9 update tool 2017-04-11 16:06:27 +02:00
Déborah Servili 7b5aaaeff2 json fix 2017-04-11 14:18:29 +02:00
Déborah Servili eee2c6d6b5 update tool's galaxy using http://contagiodump.blogspot.lu/2013/03/mandiant-apt1-samples-categorized-by.html 2017-04-11 14:09:44 +02:00
Déborah Servili 0e7ca5b18e Merge https://github.com/MISP/misp-galaxy 2017-04-11 10:26:55 +02:00
Alexandre Dulaunoy bbf6716c73 Longhorn (CIA) added 2017-04-10 20:22:57 +02:00
Alexandre Dulaunoy ab5b73a3cd Sathurbot added 2017-04-06 20:49:53 +02:00
Alexandre Dulaunoy 8c09223477 The product from NSO Group Technologies added to the list of tools.
The Pegasus name is used as synonym of Chrysaor ;-)
2017-04-04 20:42:08 +02:00
Alexandre Dulaunoy 0578d7b7b1 The mysterious ZIRCONIUM activity group added 2017-04-03 19:44:36 +02:00
Alexandre Dulaunoy 0fb938a551 Merge pull request #43 from nyx0/master
Add new Sednit name
2017-03-31 15:34:25 +02:00
nyx0 78cdb10aae Add new Sednit name according to https://www.secureworks.com/research/iron-twilight-supports-active-measures 2017-03-31 09:28:50 -04:00
Alexandre Dulaunoy b3f1069686 Trochilus and MoonWind RATs added 2017-03-30 15:01:23 +02:00
Alexandre Dulaunoy f0e42a1818 KHRAT added 2017-03-29 16:37:31 +02:00
Alexandre Dulaunoy 7ae4301ba0 Merge pull request #42 from chrisdoman/master
Added descriptions and reference to threat-actor json
2017-03-22 14:12:03 +01:00
chrisdoman dbf989c742 Added descriptions and reference to threat-actor json 2017-03-22 12:52:05 +00:00
Alexandre Dulaunoy 6ce28c8c90 JQ all 2017-03-16 23:12:11 +01:00
Raphaël Vinot 1ed0558c07 Merge branch 'master' into master 2017-03-16 17:38:59 +01:00
Raphaël Vinot e1b5701351 JQ all the things 2017-03-16 17:31:43 +01:00
Raphaël Vinot bc78bdde33 Merge pull request #41 from CERT-Bund/patch-1
Added groups, joined groups, added synonyms (see extended description)
2017-03-16 17:31:13 +01:00
Raphaël Vinot 0d8d265319 Fix typo. 2017-03-16 17:27:17 +01:00
CERT-Bund 4112a041f7 Added groups, joined groups, added synonyms (see extended description)
Added: HammerPanda, Barium, Infy, Sima, Groundbait
Joined: StrongPity and Promethium
Synonyms: Lead as Winnti, Moonlight as MoleRats, FalloutTeam as DarkHotel, DustStorm as StonePanda, Skipper and Popeye as Pacifier
2017-03-16 17:02:55 +01:00
Alexandre Dulaunoy 71ad9099c4 IMEIJ added 2017-03-13 13:59:46 +01:00
Kafeine 73a82418df Empire status, Nebula, Blaze/Terror 2017-03-02 21:29:19 +00:00
Alexandre Dulaunoy e002e62204 missing \n at the end of the file 2017-03-01 14:55:45 +01:00
Alexandre Dulaunoy 876ae24454 Merge pull request #38 from chrisdoman/master
Added references
2017-03-01 14:54:35 +01:00
Chris Doman 9e5c983a65 Ran jq 2017-03-01 13:24:00 +00:00
Chris Doman e934f88b3b Added references
Mostly added references to existing groups
Capitalised DarkHotel, put a space in APT30 default name (the others
had that)
2017-03-01 12:53:52 +00:00
Alexandre Dulaunoy a224c7ce5e add: Gamaredon Group added 2017-02-28 09:17:33 +01:00