Mirrors/APT_CyberCriminal_Campagin_Collections
6
0
Fork 0
mirror of https://github.com/CyberMonitor/APT_CyberCriminal_Campagin_Collections synced 2024-06-20 22:09:47 +00:00
Code Issues Projects Releases Wiki Activity

2017.01.15.Bear_Spotting_Vol.1

Browse Source
This commit is contained in:
CyberMonitor 2017-02-28 20:30:46 +08:00
parent 80eefca45d
commit 8229bdad65
3 changed files with 23 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
2017/2017.01.15.Bear_Spotting_Vol.1/TIB-00003_IOC_Domain.txt Normal file
View File

@ -0,0 +1,22 @@
## Domain IOC's associated with Russian Nation State Campaigns Targeting Government and Military Interests
## Source: www.tr1adx.net
## Last Updated: 2017-01-15
##
af-army.us
afceaint.org
webmail-mil.dk
nato-nevvs.org
jimin-jp.biz
jica-go-jp.biz
mofa-go-jp.com
turkey-mia.com
turkey-icisleri.com
dpko.info
unausanyc.com
ausa.info
mea-gov.in
mfa-news.com
defenceinform.com
middle-eastreview.com
middle-easterview.com
foreign-review.com

BIN
2017/2017.01.15.Bear_Spotting_Vol.1/[tr1adx]_ Intel.pdf Normal file
View File

Binary file not shown.

1
README.md
View File

@ -28,6 +28,7 @@ Please fire issue to me if any lost of APT/Malware events/campaigns.
* Feb 02 - [Oops, they did it again: APT Targets Russia and Belarus with ZeroT and PlugX](https://www.proofpoint.com/us/threat-insight/post/APT-targets-russia-belarus-zerot-plugx) | [Local](../../blob/master/2017/2017.02.02.APT_Targets_Russia_and_Belarus_with_ZeroT_and_PlugX)
* Jan 30 - [Downeks and Quasar RAT Used in Recent Targeted Attacks Against Governments](http://researchcenter.paloaltonetworks.com/2017/01/unit42-downeks-and-quasar-rat-used-in-recent-targeted-attacks-against-governments/) | [Local](../../blob/master/2017/2017.01.30.downeks-and-quasar-rat-used-in-recent-targeted-attacks-against-governments)
* Jan 19 - [URI Terror Attack & Kashmir Protest Themed Spear Phishing Emails Targeting Indian Embassies And Indian Ministry Of External Affairs](https://cysinfo.com/uri-terror-attack-spear-phishing-emails-targeting-indian-embassies-and-indian-mea/) | [Local](../../blob/master/2017/2017.01.19.uri-terror-attack-spear-phishing-emails-targeting-indian-embassies-and-indian-mea)
* Jan 15 - [Bear Spotting Vol. 1: Russian Nation State Targeting of Government and Military Interests](https://www.tr1adx.net/intel/TIB-00003.html) | [Local](../../blob/master/2017/2017.01.15.Bear_Spotting_Vol.1)
* Jan 12 - [The “EyePyramid” attacks](https://securelist.com/blog/incidents/77098/the-eyepyramid-attacks/) | [Local](../../blob/master/2017/2017.01.12.EyePyramid.attacks)
* Jan 11 - [APT28: AT THE CENTER OF THE STORM](https://www.fireeye.com/blog/threat-research/2017/01/apt28_at_the_center.html) | [Local](../../blob/master/2017/2017.01.11.apt28_at_the_center)
* Jan 09 - [Second Wave of Shamoon 2 Attacks Identified](http://researchcenter.paloaltonetworks.com/2017/01/unit42-second-wave-shamoon-2-attacks-identified/) | [Local](../../blob/master/2017/2017.01.09.second-wave-shamoon-2-attacks-identified)