Add botnet taxonomy (#1049)

* add botnet taxonomy

* seb approved label

taxonomy/classifications.json

@@ -183,5 +183,165 @@
         "description": "IP is a shared web hosting server.",
         "label": "Shared Web Hosting",
         "name": "profile:web_hosting"
+    },
+    "botnet:amadey": {
+        "description": "IP belongs to the amadey botnet.",
+        "label": "Amadey Botnet Member",
+        "name": "botnet:amadey"
+    },
+    "hosts_malware:amadey": {
+        "description": "IP hosts malware used by the amadey botnet.",
+        "label": "Hosts Amadey Malware",
+        "name": "hosts_malware:amadey"
+    },
+    "botnet:mozi": {
+        "description": "IP belongs to the mozi botnet.",
+        "label": "Mozi Botnet Member",
+        "name": "botnet:mozi"
+    },
+    "hosts_malware:mozi": {
+        "description": "IP hosts malware used by the mozi botnet.",
+        "label": "Hosts Mozi Malware",
+        "name": "hosts_malware:mozi"
+    },
+    "botnet:guloader": {
+        "description": "IP belongs to the guloader botnet.",
+        "label": "Guloader Botnet Member",
+        "name": "botnet:guloader"
+    },
+    "hosts_malware:guloader": {
+        "description": "IP hosts malware used by the guloader botnet.",
+        "label": "Hosts Guloader Malware",
+        "name": "hosts_malware:guloader"
+    },
+    "botnet:donutmate": {
+        "description": "IP belongs to the donutmate botnet.",
+        "label": "Donutmate Botnet Member",
+        "name": "botnet:donutmate"
+    },
+    "hosts_malware:donutmate": {
+        "description": "IP hosts malware used by the donutmate botnet.",
+        "label": "Hosts Donutmate Malware",
+        "name": "hosts_malware:donutmate"
+    },
+    "botnet:moobot": {
+        "description": "IP belongs to the moobot botnet.",
+        "label": "Moobot Botnet Member",
+        "name": "botnet:moobot"
+    },
+    "hosts_malware:moobot": {
+        "description": "IP hosts malware used by the moobot botnet.",
+        "label": "Hosts Moobot Malware",
+        "name": "hosts_malware:moobot"
+    },
+    "botnet:gafgyt": {
+        "description": "IP belongs to the gafgyt botnet.",
+        "label": "Gafgyt Botnet Member",
+        "name": "botnet:gafgyt"
+    },
+    "hosts_malware:gafgyt": {
+        "description": "IP hosts malware used by the gafgyt botnet.",
+        "label": "Hosts Gafgyt Malware",
+        "name": "hosts_malware:gafgyt"
+    },
+    "botnet:banker": {
+        "description": "IP belongs to the banker botnet.",
+        "label": "Banker Botnet Member",
+        "name": "botnet:banker"
+    },
+    "hosts_malware:banker": {
+        "description": "IP hosts malware used by the banker botnet.",
+        "label": "Hosts Banker Malware",
+        "name": "hosts_malware:banker"
+    },
+    "botnet:black": {
+        "description": "IP belongs to the black botnet.",
+        "label": "Black Botnet Member",
+        "name": "botnet:black"
+    },
+    "hosts_malware:black": {
+        "description": "IP hosts malware used by the black botnet.",
+        "label": "Hosts Black Malware",
+        "name": "hosts_malware:black"
+    },
+    "botnet:remcosrat": {
+        "description": "IP belongs to the remcosrat botnet.",
+        "label": "Remcosrat Botnet Member",
+        "name": "botnet:remcosrat"
+    },
+    "hosts_malware:remcosrat": {
+        "description": "IP hosts malware used by the remcosrat botnet.",
+        "label": "Hosts Remcosrat Malware",
+        "name": "hosts_malware:remcosrat"
+    },
+    "botnet:hajime": {
+        "description": "IP belongs to the hajime botnet.",
+        "label": "Hajime Botnet Member",
+        "name": "botnet:hajime"
+    },
+    "hosts_malware:hajime": {
+        "description": "IP hosts malware used by the hajime botnet.",
+        "label": "Hosts Hajime Malware",
+        "name": "hosts_malware:hajime"
+    },
+    "botnet:zgrat": {
+        "description": "IP belongs to the zgrat botnet.",
+        "label": "Zgrat Botnet Member",
+        "name": "botnet:zgrat"
+    },
+    "hosts_malware:zgrat": {
+        "description": "IP hosts malware used by the zgrat botnet.",
+        "label": "Hosts Zgrat Malware",
+        "name": "hosts_malware:zgrat"
+    },
+    "botnet:stealc": {
+        "description": "IP belongs to the stealc botnet.",
+        "label": "Stealc Botnet Member",
+        "name": "botnet:stealc"
+    },
+    "hosts_malware:stealc": {
+        "description": "IP hosts malware used by the stealc botnet.",
+        "label": "Hosts Stealc Malware",
+        "name": "hosts_malware:stealc"
+    },
+    "botnet:mirai": {
+        "description": "IP belongs to the mirai botnet.",
+        "label": "Mirai Botnet Member",
+        "name": "botnet:mirai"
+    },
+    "hosts_malware:mirai": {
+        "description": "IP hosts malware used by the mirai botnet.",
+        "label": "Hosts Mirai Malware",
+        "name": "hosts_malware:mirai"
+    },
+    "botnet:kinsing": {
+        "description": "IP belongs to the kinsing botnet.",
+        "label": "Kinsing Botnet Member",
+        "name": "botnet:kinsing"
+    },
+    "hosts_malware:kinsing": {
+        "description": "IP hosts malware used by the kinsing botnet.",
+        "label": "Hosts Kinsing Malware",
+        "name": "hosts_malware:kinsing"
+    },
+    "botnet:agenttesla": {
+        "description": "IP belongs to the agenttesla botnet.",
+        "label": "Agenttesla Botnet Member",
+        "name": "botnet:agenttesla"
+    },
+    "hosts_malware:agenttesla": {
+        "description": "IP hosts malware used by the agenttesla botnet.",
+        "label": "Hosts Agenttesla Malware",
+        "name": "hosts_malware:agenttesla"
+    },
+    "botnet:byob": {
+        "description": "IP belongs to the byob botnet.",
+        "label": "Byob Botnet Member",
+        "name": "botnet:byob"
+    },
+    "hosts_malware:byob": {
+        "description": "IP hosts malware used by the byob botnet.",
+        "label": "Hosts Byob Malware",
+        "name": "hosts_malware:byob"
     }
 }