From 1517bcf7a992a986491ef4a185c068eee0b66d44 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Mon, 16 May 2016 11:59:14 +0200
Subject: [PATCH] Lazarus group (KP) added

---
 elements/adversary-groups.json | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/elements/adversary-groups.json b/elements/adversary-groups.json
index bddfc81..82b06c1 100644
--- a/elements/adversary-groups.json
+++ b/elements/adversary-groups.json
@@ -648,6 +648,15 @@
         "http://www.rsaconference.com/writable/presentations/file_upload/anf-t07b-the-art-of-attribution-identifying-and-pursuing-your-cyber-adversaries_final.pdf"
       ]
     },
+    {
+      "country": "KP",
+      "group": "Lazarus Group",
+      "synonyms": [
+       "Operation DarkSeoul" ],
+      "refs": [
+        "https://threatpost.com/operation-blockbuster-coalition-ties-destructive-attacks-to-lazarus-group/116422/"
+      ]
+    },
     {
       "synonyms": [
         "Appin",