Skip to content

Adding object defintion for spearphishing-campaign - #466

Merged
adulau merged 1 commit into
MISP:mainfrom
railisac:main
Sep 19, 2025
Merged

adulau merged 1 commit into
MISP:mainfrom
railisac:main

Conversation

@railisac

@railisac railisac commented Sep 2, 2025

Copy link
Copy Markdown
Contributor

Object spearphishing-campaign describes a spearphishing campaign from the email to the TA connect back IOC - typically witnessed when interacting with Adversary-in-the-Middle phishing kits.

This object allows automation, from the the detection of malicious emails to track network connection to phishing IOCs and detection of suspicious connect-backs from AitM phishing kits.

Object spearphishing-campaign describes a spearphishing campaign from the email to the TA connect back IOC - typically witnessed when interacting with Adversary-in-the-Middle phishing kits
@adulau
adulau merged commit 3c56f77 into MISP:main Sep 19, 2025
2 of 5 checks passed
@adulau

adulau commented Sep 19, 2025

Copy link
Copy Markdown
Member

Thanks a lot for the contribution. It's now merged in the official repository, I added the required fields but feel free to adapt if I missed one.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants