From 394950379bdcf7658a8604e19a5b1495eb319f67 Mon Sep 17 00:00:00 2001
From: Deborah Servili <deborah.servili@gmail.com>
Date: Mon, 7 May 2018 15:27:29 +0200
Subject: [PATCH] add Kitty malware

---
 clusters/tool.json | 14 +++++++++++++-
 1 file changed, 13 insertions(+), 1 deletion(-)

diff --git a/clusters/tool.json b/clusters/tool.json
index bbc05ee..bc717ab 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -11,7 +11,7 @@
   ],
   "description": "threat-actor-tools is an enumeration of tools used by adversaries. The list includes malware but also common software regularly used by the adversaries.",
   "uuid": "0d821b68-9d82-4c6d-86a6-1071a9e0f79f",
-  "version": 66,
+  "version": 67,
   "values": [
     {
       "meta": {
@@ -4150,6 +4150,18 @@
         ]
       },
       "uuid": "b7be6732-4ed5-11e8-8b82-dff39eb7a396"
+    },
+    {
+      "value": "kitty Malware",
+      "description":  "Researchers at Imperva's Incapsula said a new piece malware called Kitty leaves a note for cat lovers. It attacks the Drupal content management system (CMS) to illegally mine cryptocurrency Monero.",
+      "meta": {
+        "refs": [
+          "https://www.zdnet.com/article/hello-kitty-malware-targets-drupal-to-mine-for-cryptocurrency/",
+          "https://threatpost.com/kitty-cryptomining-malware-cashes-in-on-drupalgeddon-2-0/131668/",
+          "https://cryptovest.com/news/hello-kitty-new-malware-me0ws-its-way-into-mining-monero/"
+        ]
+      },
+      "uuid": "85d5da28-51f7-11e8-bbeb-af367d720136"
     }
   ]
 }