From 26c1850377afb22dcc37b9deb3ec2c2e7ec9ebd8 Mon Sep 17 00:00:00 2001
From: Daniel Plohmann <daniel.plohmann@mailbox.org>
Date: Fri, 6 May 2022 09:47:48 +0200
Subject: [PATCH] Update threat-actor.json

adding Red Dev 4 as alias for GALLIUM as used by PwC.
---
 clusters/threat-actor.json | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index c73fcf1..5bba42c 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -8210,7 +8210,11 @@
       "meta": {
         "refs": [
           "https://www.microsoft.com/security/blog/2019/12/12/gallium-targeting-global-telecom/",
-          "https://www.youtube.com/watch?v=fBFm2fiEPTg"
+          "https://www.youtube.com/watch?v=fBFm2fiEPTg",
+          "https://troopers.de/troopers22/talks/7cv8pz/"
+        ],
+        "synonyms": [
+          "Red Dev 4"
         ]
       },
       "related": [
@@ -9196,5 +9200,5 @@
       "value": "UNC3524"
     }
   ],
-  "version": 220
+  "version": 221
 }