cti-ATT-CK-v13.1/enterprise-attack/campaign/campaign--37764c78-2a99-46d1-a7ea-6454b9bf93a0.json

{
    "type": "bundle",
    "id": "bundle--059f1f97-6910-48cc-ac18-632472677500",
    "spec_version": "2.0",
    "objects": [
        {
            "modified": "2022-10-13T17:10:55.334Z",
            "name": "Operation Sharpshooter",
            "description": "[Operation Sharpshooter](https://attack.mitre.org/campaigns/C0013) was a global cyber espionage campaign that targeted nuclear, defense, government, energy, and financial companies, with many located in Germany, Turkey, the United Kingdom, and the United States. Security researchers noted the campaign shared many similarities with previous [Lazarus Group](https://attack.mitre.org/groups/G0032) operations, including fake job recruitment lures and shared malware code.(Citation: McAfee Sharpshooter December 2018)(Citation: Bleeping Computer Op Sharpshooter March 2019)(Citation: Threatpost New Op Sharpshooter Data March 2019)    ",
            "aliases": [
                "Operation Sharpshooter"
            ],
            "first_seen": "2017-09-01T05:00:00.000Z",
            "last_seen": "2019-03-01T06:00:00.000Z",
            "x_mitre_first_seen_citation": "(Citation: Threatpost New Op Sharpshooter Data March 2019)",
            "x_mitre_last_seen_citation": "(Citation: Threatpost New Op Sharpshooter Data March 2019)",
            "x_mitre_deprecated": false,
            "x_mitre_version": "1.0",
            "type": "campaign",
            "id": "campaign--37764c78-2a99-46d1-a7ea-6454b9bf93a0",
            "created": "2022-09-26T21:18:34.075Z",
            "created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5",
            "revoked": false,
            "external_references": [
                {
                    "source_name": "mitre-attack",
                    "url": "https://attack.mitre.org/campaigns/C0013",
                    "external_id": "C0013"
                },
                {
                    "source_name": "Bleeping Computer Op Sharpshooter March 2019",
                    "description": "I. Ilascu. (2019, March 3). Op 'Sharpshooter' Connected to North Korea's Lazarus Group. Retrieved September 26, 2022.",
                    "url": "https://www.bleepingcomputer.com/news/security/op-sharpshooter-connected-to-north-koreas-lazarus-group/"
                },
                {
                    "source_name": "Threatpost New Op Sharpshooter Data March 2019",
                    "description": "L. O'Donnell. (2019, March 3). RSAC 2019: New Operation Sharpshooter Data Reveals Higher Complexity, Scope. Retrieved September 26, 2022.",
                    "url": "https://threatpost.com/sharpshooter-complexity-scope/142359/"
                },
                {
                    "source_name": "McAfee Sharpshooter December 2018",
                    "description": "Sherstobitoff, R., Malhotra, A., et. al.. (2018, December 18). Operation Sharpshooter Campaign Targets Global Defense, Critical Infrastructure. Retrieved May 14, 2020.",
                    "url": "https://www.mcafee.com/enterprise/en-us/assets/reports/rp-operation-sharpshooter.pdf"
                }
            ],
            "object_marking_refs": [
                "marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168"
            ],
            "x_mitre_attack_spec_version": "3.0.0",
            "x_mitre_modified_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5",
            "x_mitre_domains": [
                "enterprise-attack"
            ]
        }
    ]
}