Merge pull request #856 from danielplohmann/main-1

alias Callisto -> BlueCharlie
MISP · Aug 3, 2023 · 7348236 · 7348236
2 parents dc29d58 + e228ffc
commit 7348236
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
@@ -4478,13 +4478,15 @@
           "https://blog.google/threat-analysis-group/continued-cyber-activity-in-eastern-europe-observed-by-tag",
           "https://www.microsoft.com/security/blog/2022/08/15/disrupting-seaborgiums-ongoing-phishing-operations",
           "https://blog.sekoia.io/calisto-continues-its-credential-harvesting-campaign",
-          "https://services.google.com/fh/files/blogs/google_fog_of_war_research_report.pdf"
+          "https://services.google.com/fh/files/blogs/google_fog_of_war_research_report.pdf",
+          "https://www.darkreading.com/attacks-breaches/russian-apt-bluecharlie-swaps-infrastructure-to-evade-detection"
         ],
         "synonyms": [
           "COLDRIVER",
           "SEABORGIUM",
           "TA446",
-          "GOSSAMER BEAR"
+          "GOSSAMER BEAR",
+          "BlueCharlie"
         ]
       },
       "related": [