[threat-actors] Add Silent Librarian aliases

MISP · Feb 5, 2024 · ffeed34 · ffeed34
1 parent 9c5bc36
commit ffeed34
Showing 1 changed file with 5 additions and 2 deletions.
diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
@@ -7947,12 +7947,15 @@
           "https://www.proofpoint.com/us/threat-insight/post/seems-phishy-back-school-lures-target-university-students-and-staff",
           "https://www.proofpoint.com/us/threat-insight/post/threat-actor-profile-ta407-silent-librarian",
           "https://www.secureworks.com/research/threat-profiles/cobalt-dickens",
-          "https://community.riskiq.com/article/44eb0802"
+          "https://community.riskiq.com/article/44eb0802",
+          "https://www.proofpoint.com/us/corporate-blog/post/iranian-state-sponsored-and-aligned-attacks-what-you-need-know-and-steps-protect"
         ],
         "synonyms": [
           "COBALT DICKENS",
           "Mabna Institute",
-          "TA407"
+          "TA407",
+          "TA4900",
+          "Yellow Nabu"
         ]
       },
       "uuid": "5059b44d-2753-4977-b987-4922f09afe6b",