From 3c7230e38eda2eca958099738daae60023de9b11 Mon Sep 17 00:00:00 2001
From: Delta-Sierra <deborah.servili@gmail.com>
Date: Tue, 22 Nov 2022 09:00:04 +0100
Subject: [PATCH] add Bazarbackdoor Synonyms

---
 clusters/backdoor.json | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/clusters/backdoor.json b/clusters/backdoor.json
index ee16029..c52e142 100644
--- a/clusters/backdoor.json
+++ b/clusters/backdoor.json
@@ -135,6 +135,14 @@
         "refs": [
           "https://www.advanced-intel.com/post/anatomy-of-attack-inside-bazarbackdoor-to-ryuk-ransomware-one-group-via-cobalt-strike",
           "https://www.pandasecurity.com/en/mediacenter/business/bazarbackdoor-trickbot-backdoor/"
+        ],
+        "synonyms": [
+          "BEERBOT",
+          "KEGTAP",
+          "Team9Backdoor",
+          "bazaloader",
+          "bazarloader",
+          "bazaarloader"
         ]
       },
       "uuid": "1523a693-5d90-4da1-86d2-b5d22317820d",
@@ -187,5 +195,5 @@
       "value": "BPFDoor"
     }
   ],
-  "version": 12
+  "version": 13
 }