cti-ATT-CK-v13.1/enterprise-attack/campaign/campaign--7854c1a0-f06c-4876-98a4-4bbd34751b05.json

{
    "type": "bundle",
    "id": "bundle--4f2bbbf0-fd44-4cf5-a7e0-e58a6687ed5e",
    "spec_version": "2.0",
    "objects": [
        {
            "modified": "2023-04-06T20:25:30.658Z",
            "name": "Operation Ghost",
            "description": "[Operation Ghost](https://attack.mitre.org/campaigns/C0023) was an [APT29](https://attack.mitre.org/groups/G0016) campaign starting in 2013 that included operations against ministries of foreign affairs in Europe and the Washington, D.C. embassy of a European Union country. During [Operation Ghost](https://attack.mitre.org/campaigns/C0023), [APT29](https://attack.mitre.org/groups/G0016) used new families of malware and leveraged web services, steganography, and unique C2 infrastructure for each victim.(Citation: ESET Dukes October 2019)\n",
            "aliases": [
                "Operation Ghost"
            ],
            "first_seen": "2013-09-01T04:00:00.000Z",
            "last_seen": "2019-10-01T04:00:00.000Z",
            "x_mitre_first_seen_citation": "(Citation: ESET Dukes October 2019)",
            "x_mitre_last_seen_citation": "(Citation: ESET Dukes October 2019)",
            "x_mitre_deprecated": false,
            "x_mitre_version": "1.0",
            "type": "campaign",
            "id": "campaign--7854c1a0-f06c-4876-98a4-4bbd34751b05",
            "created": "2023-03-23T17:51:58.539Z",
            "created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5",
            "revoked": false,
            "external_references": [
                {
                    "source_name": "mitre-attack",
                    "url": "https://attack.mitre.org/campaigns/C0023",
                    "external_id": "C0023"
                },
                {
                    "source_name": "ESET Dukes October 2019",
                    "description": "Faou, M., Tartare, M., Dupuy, T. (2019, October). OPERATION GHOST. Retrieved September 23, 2020.",
                    "url": "https://www.welivesecurity.com/wp-content/uploads/2019/10/ESET_Operation_Ghost_Dukes.pdf"
                }
            ],
            "object_marking_refs": [
                "marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168"
            ],
            "x_mitre_attack_spec_version": "3.1.0",
            "x_mitre_modified_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5",
            "x_mitre_domains": [
                "enterprise-attack"
            ]
        }
    ]
}