Merge pull request #1047 from r0ny123/patch-1

chg: [threat-actor] update `UNC4841` with more references and add `SLIME57` as an alias
MISP · Jan 26, 2025 · 41a0c7f · 41a0c7f
2 parents 64d41cb + c820b45
commit 41a0c7f
Showing 1 changed file with 18 additions and 3 deletions.
diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
@@ -13788,9 +13788,24 @@
       "meta": {
         "country": "CN",
         "refs": [
-          "https://blog.polyswarm.io/unc4841-targeting-government-entities-with-barracuda-esg-0day-cve-2023-2868",
-          "https://www.mandiant.com/resources/blog/unc4841-post-barracuda-zero-day-remediation",
-          "https://www.mandiant.com/resources/blog/barracuda-esg-exploited-globally"
+          "https://cloud.google.com/blog/topics/threat-intelligence/unc4841-post-barracuda-zero-day-remediation/",
+          "https://cloud.google.com/blog/topics/threat-intelligence/barracuda-esg-exploited-globally/",
+          "https://i.blackhat.com/Asia-24/Presentations/Asia-24-Chen-Chinese-APT.pdf",
+          "https://www.youtube.com/watch?v=PSaix1C-UMI",
+          "https://www.youtube.com/watch?v=4zaStuUdvrE",
+          "https://sansorg.egnyte.com/dd/8ekLJCPHPj/",
+          "https://www.cisa.gov/sites/default/files/2023-07/MAR-10454006.r3.v1.CLEAR_.pdf",
+          "https://www.cisa.gov/sites/default/files/2023-07/MAR-10454006.r2.v1.CLEAR_.pdf",
+          "https://www.cisa.gov/sites/default/files/2023-07/MAR-10454006.r1.v2.CLEAR_.pdf",
+          "https://www.cisa.gov/sites/default/files/2023-08/MAR-10459736.r1.v1.CLEAR_.pdf",
+          "https://www.cisa.gov/sites/default/files/2023-08/MAR-10454006.r4.v2.CLEAR_.pdf",
+          "https://www.cisa.gov/sites/default/files/2023-09/MAR-10454006.r5.v1.CLEAR__0.pdf",
+          "https://www.barracuda.com/company/legal/esg-vulnerability",
+          "https://mandiant.widen.net/s/qwlxddwdg6/barracuda-cve-2023-2868-hardening",
+          "https://jsac.jpcert.or.jp/archive/2025/pdf/JSAC2025_1_5_leon-chang_theo-chen_en.pdf"
+        ],
+        "synonyms": [
+          "SLIME57"
         ]
       },
       "uuid": "8959fbb4-95f0-485d-bba2-db9140b95386",