From 06550a7945c1d282914dd8e2447f7ade5eb02869 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Mon, 9 May 2022 13:46:16 +0200
Subject: [PATCH] chg: [threat-actor] fix refs field -> it's always an array

---
 clusters/threat-actor.json | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 431db84..69ba274 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -9253,7 +9253,9 @@
       "description": "Cosmic Lynx is a Russia-based BEC cybercriminal organization that has significantly impacted the email threat landscape with sophisticated, high-dollar phishing attacks.",
       "meta": {
         "cfr-type-of-incident": "Business Email Compromise",
-        "refs": "https://www.agari.com/cyber-intelligence-research/whitepapers/acid-agari-cosmic-lynx.pdf"
+        "refs": [
+          "https://www.agari.com/cyber-intelligence-research/whitepapers/acid-agari-cosmic-lynx.pdf"
+        ]
       },
       "uuid": "54ae5c75-8aab-41a8-971a-03d53db9b35c",
       "value": "Cosmic Lynx"