From 4075e02ccb671d3233a556f3a6bbbe9c11deb342 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Mon, 16 May 2016 13:44:02 +0200
Subject: [PATCH] Hancitor and Ruckguv added

---
 elements/threat-actor-tools.json | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/elements/threat-actor-tools.json b/elements/threat-actor-tools.json
index 583e41a..c2fe0c4 100644
--- a/elements/threat-actor-tools.json
+++ b/elements/threat-actor-tools.json
@@ -427,6 +427,15 @@
     {
       "value": "Hikit",
       "refs": ["https://blog.bit9.com/2013/02/25/bit9-security-incident-update/"]
+    },
+    {
+      "value": "Hancitor",
+      "refs": ["https://www.proofpoint.com/us/threat-insight/post/hancitor-ruckguv-reappear"],
+      "synonyms": ["Tordal","Chanitor"]
+    },
+    {
+      "value": "Ruckguv",
+      "refs": ["https://www.proofpoint.com/us/threat-insight/post/hancitor-ruckguv-reappear"]
     }
   ],
   "version" : 1,