From 0daeb675f5a06cca1d904be9f31736e9f7a43478 Mon Sep 17 00:00:00 2001
From: Thomas Dupuy <thom4s.d@gmail.com>
Date: Tue, 18 Feb 2020 13:28:32 -0500
Subject: [PATCH] Add InvisiMole cluster

---
 clusters/threat-actor.json | 19 ++++++++++++++++++-
 1 file changed, 18 insertions(+), 1 deletion(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 00da6c4..836c812 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -7948,7 +7948,24 @@
       },
       "uuid": "53771ca5-f1cb-47b6-a92a-53a485307cf7",
       "value": "APT-C-12"
+    },
+    {
+      "description": "Adversary group targeting diplomatic missions, governmental and military organisations, mainly in Ukraine.",
+      "meta": {
+        "cfr-suspected-victims": [
+          "Ukraine"
+        ],
+        "cfr-target-category": [
+          "Government"
+        ],
+        "cfr-type-of-incident": "Espionage",
+        "refs": [
+            "https://www.welivesecurity.com/2018/06/07/invisimole-equipped-spyware-undercover/"
+        ]
+      },
+      "uuid": "87af83a4-ced4-4e7c-96a6-86612dc095b1",
+      "value": "InvisiMole"
     }
   ],
-  "version": 154
+  "version": 155
 }