From 058f778e61d9a0b2c36ffd5f135e5d78c94e15bd Mon Sep 17 00:00:00 2001
From: Deborah Servili <deborah.servili@gmail.com>
Date: Wed, 19 Sep 2018 09:04:04 +0200
Subject: [PATCH] add references

---
 clusters/threat-actor.json | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index a0031f0..879e7be 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -2198,7 +2198,8 @@
           "https://securelist.com/blog/research/67962/the-penquin-turla-2/",
           "https://www2.fireeye.com/rs/848-DID-242/images/rpt-witchcoven.pdf",
           "https://www.welivesecurity.com/2017/03/30/carbon-paper-peering-turlas-second-stage-backdoor/",
-          "https://www.cfr.org/interactive/cyber-operations/turla"
+          "https://www.cfr.org/interactive/cyber-operations/turla",
+          "https://www.bleepingcomputer.com/news/security/turla-outlook-backdoor-uses-clever-tactics-for-stealth-and-persistence/"
         ],
         "synonyms": [
           "Turla",
@@ -5714,5 +5715,5 @@
       "uuid": "abd89986-b1b0-11e8-b857-efe290264006"
     }
   ],
-  "version": 57
+  "version": 58
 }