From 3e3e9bf65395692b20191fddff0a04bd90d1f1cb Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Mon, 24 Oct 2016 08:44:40 +0200
Subject: [PATCH] TeamXRat added

---
 elements/adversary-groups.json | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/elements/adversary-groups.json b/elements/adversary-groups.json
index 0eda0e0..0f775f7 100644
--- a/elements/adversary-groups.json
+++ b/elements/adversary-groups.json
@@ -95,7 +95,8 @@
     "Threat Group-3390",
     "Project Sauron",
     "Libyan Scorpions",
-    "StrongPity"
+    "StrongPity",
+    "TeamXRat"
   ],
   "values": [
     {
@@ -962,6 +963,11 @@
      {
        "value": "StrongPity",
        "refs": ["https://www.virusbulletin.com/conference/vb2016/abstracts/last-minute-paper-strongpity-waterhole-attacks-targeting-italian-and-belgian-encryption-users"]
+     },
+     {
+       "value": "TeamXRat",
+       "refs": ["https://securelist.com/blog/research/76153/teamxrat-brazilian-cybercrime-meets-ransomware/"],
+       "synonyms": ["CorporacaoXRat","CorporationXRat"]
      }
   ]
 }