Update of IOCs and README with blog URL

mandiant · Jul 13, 2015 · 709111e · 709111e
1 parent 4cc836d
commit 709111e
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 2 deletions.
diff --git a/APT18/0ae061d7-c624-4a84-8adf-00281b97797b.ioc b/APT18/0ae061d7-c624-4a84-8adf-00281b97797b.ioc
@@ -19,7 +19,7 @@
 -->
 <ioc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.mandiant.com/2010/ioc" id="0ae061d7-c624-4a84-8adf-00281b97797b" last-modified="2015-07-12T02:56:02Z">
   <short_description>DEMONSTRATING HUSTLE - APT18 (BLOG)</short_description>
-  <description>This IOC contains indicators detailed in the blog post "Demonstrating Hustle" that can be read here: http://www.fireeye.com/blog. This IOC contains indicators for a spearphishing campaign carried out by APT18.</description>
+  <description>This IOC contains indicators detailed in the blog post "Demonstrating Hustle" that can be read here: https://www.fireeye.com/blog/threat-research/2015/07/demonstrating_hustle.html. This IOC contains indicators for a spearphishing campaign carried out by APT18.</description>
   <keywords/>
   <authored_by>FireEye</authored_by>
   <authored_date>2015-07-10T21:24:04Z</authored_date>

diff --git a/APT18/README.md b/APT18/README.md
@@ -0,0 +1,3 @@
+# Demonstrating Hustle
+
+Read more about this group and what these indicators mean in FireEye's blog post about them: [https://www.fireeye.com/blog/threat-research/2015/07/demonstrating_hustle.html](https://www.fireeye.com/blog/threat-research/2015/07/demonstrating_hustle.html)
diff --git a/APT3/62f65dae-9475-44b0-a9eb-c1baebbd9885.ioc b/APT3/62f65dae-9475-44b0-a9eb-c1baebbd9885.ioc
@@ -19,7 +19,7 @@
 -->
 <ioc xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.mandiant.com/2010/ioc" id="62f65dae-9475-44b0-a9eb-c1baebbd9885" last-modified="2015-07-12T02:55:58Z">
   <short_description>DEMONSTRATING HUSTLE - APT3 (BLOG)</short_description>
-  <description>This IOC contains indicators detailed in the blog post "Demonstrating Hustle" that can be read here: http://www.fireeye.com/blog. This IOC contains indicators for a spearphishing campaign carried out by APT3.</description>
+  <description>This IOC contains indicators detailed in the blog post "Demonstrating Hustle" that can be read here: https://www.fireeye.com/blog/threat-research/2015/07/demonstrating_hustle.html. This IOC contains indicators for a spearphishing campaign carried out by APT3.</description>
   <keywords/>
   <authored_by>FireEye</authored_by>
   <authored_date>2015-07-10T21:17:05Z</authored_date>

diff --git a/APT3/README.md b/APT3/README.md
@@ -1,3 +1,7 @@
 # APT3 — Operation Double Tap
 
 Read more about this group and what these indicators mean in FireEye's blog post about them: [https://www.fireeye.com/blog/threat-research/2014/11/operation_doubletap.html](https://www.fireeye.com/blog/threat-research/2014/11/operation_doubletap.html)
+
+# Demonstrating Hustle
+
+Read more about this group and what these indicators mean in FireEye's blog post about them: [https://www.fireeye.com/blog/threat-research/2015/07/demonstrating_hustle.html](https://www.fireeye.com/blog/threat-research/2015/07/demonstrating_hustle.html)