From 1beae33de5747e25f62db96412355ab6f5b30459 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Mon, 1 Aug 2016 15:27:55 +0200
Subject: [PATCH] Crimson malwre added

---
 elements/threat-actor-tools.json | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/elements/threat-actor-tools.json b/elements/threat-actor-tools.json
index f48e3e6..44f65db 100644
--- a/elements/threat-actor-tools.json
+++ b/elements/threat-actor-tools.json
@@ -481,6 +481,11 @@
     {
       "value": "Mad Max",
       "refs": ["https://www.arbornetworks.com/blog/asert/mad-max-dga/"]
+    },
+    {
+      "value": "Crimson",
+      "description": "Crimson is malware used as part of a campaign known as Operation Transparent Tribe that targeted Indian diplomatic and military victims",
+      "refs: ["https://www.proofpoint.com/sites/default/files/proofpoint-operation-transparent-tribe-threat-insight-en.pdf"]
     }
 
   ],