From 408f8c08cd4bb3f99fc08f6cf3c39b87543e8397 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Tue, 5 Jul 2016 22:19:31 +0200
Subject: [PATCH] HummingBad added

---
 elements/adversary-groups.json | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/elements/adversary-groups.json b/elements/adversary-groups.json
index e85a712..a3e060a 100644
--- a/elements/adversary-groups.json
+++ b/elements/adversary-groups.json
@@ -85,7 +85,8 @@
     "Codoso",
     "Nitro",
     "Stealth Falcon",
-    "Pacifier APT"
+    "Pacifier APT",
+    "HummingBad"
   ],
   "details": [
     {
@@ -835,6 +836,14 @@
       "refs": [
         "http://download.bitdefender.com/resources/files/News/CaseStudies/study/115/Bitdefender-Whitepaper-PAC-A4-en-EN1.pdf"
       ]
+    },
+    {
+      "country": "CN",
+      "group": "HummingBad",
+      "description": " This group created a malware that takes over Android devices and generates $300,000 per month in fraudulent ad revenue.  The group effectively controls an arsenal of over 85 million mobile devices around the world. With the potential to sell access to these devices to the highest bidder",
+      "refs": [
+        "http://blog.checkpoint.com/wp-content/uploads/2016/07/HummingBad-Research-report_FINAL-62916.pdf"
+      ]
     }
   ]
 }