Merged by type-aware id across episodes. Same name + different type stay distinct (for example Sandworm the group vs Sandworm the book).
| Name | Type | Aliases | Episodes | Relationships |
|---|---|---|---|---|
|
National Crime Agency
organisation:national_crime_agency
|
Organisation | NCA, National Crime Agency’s Cyber Crime Unit, UK’s National Crime Agency | 6 | 1 |
|
NotPetya
malware:notpetya
|
Malware | 6 | 17 | |
|
persistence
technique:persistence
|
Technique | establishing persistence, persistent connection | 6 | 4 |
|
PGP
protocol:pgp
|
Protocol | PGP e-mails, PGP keys, Pretty Good Privacy | 6 | 5 |
|
PowerShell
software:powershell
|
Software | Power Shell, PowerShell scripts, power shell | 6 | 3 |
|
Python
software:python
|
Software | 6 | 3 | |
|
Ransomware
malware:ransomware
|
Malware | 6 | 6 | |
|
Shadow Brokers
threat_actor:shadow_brokers
|
Threat actor | Shadow Brokerss, the Shadow Brokers group | 6 | 5 |
|
TeamViewer
software:teamviewer
|
Software | Team Viewed, Team Viewer | 6 | 4 |
|
Twitter
website:twitter
|
Website | 6 | 1 | |
|
VPN
tool:vpn
|
Tool | VPN service, virtual private network | 6 | 2 |
|
VPN
network_component:vpn
|
Network component | VPN portal, VPN tunnels, VPNs, virtual private network | 6 | 3 |
|
WhatsApp
software:whatsapp
|
Software | 6 | 3 | |
|
Account takeover
technique:account_takeover
|
Technique | account compromise, account takeover, account takeovers, email compromise, hacking into accounts | 5 | 3 |
|
Black Hat
organisation:black_hat
|
Organisation | Black Hat Security Conference | 5 | 2 |
|
credential reuse
technique:credential_reuse
|
Technique | credential stuffing, password reuse | 5 | 5 |
|
Credential stuffing
technique:credential_stuffing
|
Technique | combo list attacks, commons, cracking accounts | 5 | 5 |
|
cross-site scripting
technique:cross_site_scripting
|
Technique | CSS-tag JavaScript execution, XSS | 5 | 6 |
|
darknetdiaries.com
website:darknetdiaries_com
|
Website | 5 | 1 | |
|
Discord
software:discord
|
Software | Discord channel | 5 | 4 |
|
Dropbox
software:dropbox
|
Software | 5 | 5 | |
|
eBay
website:ebay
|
Website | 5 | 4 | |
|
EternalBlue
exploit:eternalblue
|
Exploit | 5 | 18 | |
|
Facebook
website:facebook
|
Website | facebook.com | 5 | 2 |
|
GitHub
website:github
|
Website | 5 | 3 |