Skip to content

add ip-addresses.txt - #11

Open
b068931cc450442b63f5b3d276ea4297 wants to merge 3 commits into
mvt-project:mainfrom
b068931cc450442b63f5b3d276ea4297:patch-2
Open

add ip-addresses.txt#11
b068931cc450442b63f5b3d276ea4297 wants to merge 3 commits into
mvt-project:mainfrom
b068931cc450442b63f5b3d276ea4297:patch-2

Conversation

@b068931cc450442b63f5b3d276ea4297

@b068931cc450442b63f5b3d276ea4297 b068931cc450442b63f5b3d276ea4297 commented Nov 15, 2023

Copy link
Copy Markdown

Adds six Hermit/RCS Lab infrastructure IP addresses and includes them in the generated STIX2 bundle used by MVT.

Sources:

The PR also adds generate_stix.py so the bundle can be reproduced from the source lists.

* [2022-06-23_rcs_lab_hermit](../spyware/2022-06-23_rcs_lab_hermit/unique_network_indicators)
	* [blog.google/threat-analysis-group](https://blog.google/threat-analysis-group/italian-spyware-vendor-targets-users-in-italy-and-kazakhstan/)
	* [github.com/stamparm/maltrail](https://github.com/stamparm/maltrail/blob/master/trails/static/malware/android_hermit.txt)
@besendorf

Copy link
Copy Markdown
Collaborator

This only has IPs in a txt files. A stix2 file needs to be generated before we can merge this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants