From 2a6bf0010c07b95d4d5f35b2c7eecdc300be2fba Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Thu, 18 Apr 2024 06:20:48 +0200
Subject: [PATCH] chg: [threat-actor] APT44 added

Ref: https://services.google.com/fh/files/misc/apt44-unearthing-sandworm.pdf
---
 clusters/threat-actor.json | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index bcc884d..cceafcf 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -2828,7 +2828,9 @@
           "https://blog.google/threat-analysis-group/fog-of-war-how-the-ukraine-conflict-transformed-the-cyber-threat-landscape/",
           "https://www.recordedfuture.com/russia-nexus-uac-0113-emulating-telecommunication-providers-in-ukraine",
           "https://cert.gov.ua/article/405538",
-          "https://cip.gov.ua/services/cm/api/attachment/download?id=60068"
+          "https://cip.gov.ua/services/cm/api/attachment/download?id=60068",
+          "https://cloud.google.com/blog/topics/threat-intelligence/apt44-unearthing-sandworm?linkId=9627235",
+          "https://services.google.com/fh/files/misc/apt44-unearthing-sandworm.pdf"
         ],
         "synonyms": [
           "Quedagh",
@@ -2843,7 +2845,8 @@
           "FROZENBARENTS",
           "UAC-0113",
           "Seashell Blizzard",
-          "UAC-0082"
+          "UAC-0082",
+          "APT44"
         ],
         "targeted-sector": [
           "Electric",
@@ -15548,5 +15551,5 @@
       "value": "UNC5174"
     }
   ],
-  "version": 305
+  "version": 306
 }