added Cyber Threat Alliance Cryptowall

This commit is contained in:
Costa Tsaousis (ktsaou) 2015-10-31 04:11:55 +02:00
parent ff46d12ac0
commit 94ffc784ec

@ -4651,6 +4651,19 @@ update ipblacklistcloud_recent $[60] "$[24*60] $[7*24*60] $[30*24*60]" ipv4 ip \
"IP Blacklist Cloud" "http://www.ip-finder.me/"
# -----------------------------------------------------------------------------
# http://www.cyberthreatalliance.org/cryptowall-dashboard.html
parse_cta_cryptowall() { cut -d ',' -f 3; }
update cta_cryptowall $[24*60] 0 ipv4 ip \
"https://public.tableau.com/views/CTAOnlineViz/DashboardData.csv?:embed=y&:showVizHome=no&:showTabs=y&:display_count=y&:display_static_image=y&:bootstrapWhenNotified=true" \
parse_cta_cryptowall \
"malware" \
"[Cyber Threat Alliance](http://www.cyberthreatalliance.org/cryptowall-dashboard.html) CryptoWall is one of the most lucrative and broad-reaching ransomware campaigns affecting Internet users today. Sharing intelligence and analysis resources, the CTA profiled the latest version of CryptoWall, which impacted hundreds of thousands of users, resulting in over US \$325 million in damages worldwide." \
"Cyber Threat Alliance" "http://www.cyberthreatalliance.org/cryptowall-dashboard.html"
# -----------------------------------------------------------------------------
# iBlocklist
# https://www.iblocklist.com/lists.php