Loading IOCs…

{'aliases': ['Honeybee'],
 'created': '2018-10-17T00:14:20.652Z',
 'created_by_ref': 'identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5',
 'description': '[Honeybee](https://attack.mitre.org/groups/G0072) is a '
                'campaign led by an unknown actor that targets humanitarian '
                'aid organizations and has been active in Vietnam, Singapore, '
                'Argentina, Japan, Indonesia, and Canada. It has been an '
                'active operation since August of 2017 and as recently as '
                'February 2018. (Citation: McAfee Honeybee)',
 'external_references': [{'external_id': 'G0072',
                          'source_name': 'mitre-attack',
                          'url': 'https://attack.mitre.org/groups/G0072'},
                         {'description': '(Citation: McAfee Honeybee)',
                          'source_name': 'Honeybee'},
                         {'description': 'Sherstobitoff, R. (2018, March 02). '
                                         'McAfee Uncovers Operation Honeybee, '
                                         'a Malicious Document Campaign '
                                         'Targeting Humanitarian Aid Groups. '
                                         'Retrieved May 16, 2018.',
                          'source_name': 'McAfee Honeybee',
                          'url': 'https://www.mcafee.com/blogs/other-blogs/mcafee-labs/mcafee-uncovers-operation-honeybee-malicious-document-campaign-targeting-humanitarian-aid-groups/'}],
 'id': 'intrusion-set--ebb73863-fa44-4617-b4cb-b9ed3414eb87',
 'modified': '2025-04-18T17:59:26.884Z',
 'name': 'Honeybee',
 'object_marking_refs': ['marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168'],
 'revoked': False,
 'spec_version': '2.1',
 'type': 'intrusion-set',
 'x_mitre_attack_spec_version': '3.2.0',
 'x_mitre_deprecated': True,
 'x_mitre_domains': ['enterprise-attack'],
 'x_mitre_modified_by_ref': 'identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5',
 'x_mitre_version': '1.1'}