[sebdraven]

This pull request updates several MISP Galaxy clusters and the README.md to add new threat actors, ransomware, infostealer, and tools, as well as incrementing the corresponding counts and versions. The most significant changes are the addition of new entities related to recent cyber incidents, especially those involving AI-assisted attacks and new malware/tool frameworks.

Additions and updates to threat actors, ransomware, infostealers, and tools:

Threat Actor and Ransomware Updates

• Added the "GOLD OGRE" cybercriminal group to clusters/threat-actor.json, with detailed attribution to AI-assisted operations and the Aur0ra ransomware, as reported by Sophos.
• Added "Aur0ra" ransomware to clusters/ransomware.json, linked to the GOLD OGRE group, with detailed notes on its AI-driven attack techniques and clarification on its naming versus other Aurora ransomware families.

Tool Cluster Enhancements

• Added "NetamLoader", a sophisticated .NET assembly-loading framework used in a supply-chain attack, to clusters/tool.json.
• Added "NIK C2", an AI-enabled command-and-control framework with extensive capabilities, to clusters/tool.json.

Infostealer Cluster Update

• Added "GrMsk" infostealer to clusters/stealer.json, with lineage and attribution details referencing ACR Stealer and Amatera.

Documentation and Metadata Updates

• Updated element counts in README.md for the relevant categories to reflect the new additions: +1 ransomware, +1 stealer, +1 threat actor, +2 tools. [1] [2] [3] [4]
• Incremented the version fields in the affected cluster JSON files to indicate the updates. [1] [2] [3] [4]