From 40d52938de326d575a4fb15592701c74aaa47437 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Sat, 7 May 2016 07:20:55 +0200
Subject: [PATCH] Lost Door RAT added

---
 elements/threat-actor-tools.json | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/elements/threat-actor-tools.json b/elements/threat-actor-tools.json
index e87efd1..4efd044 100644
--- a/elements/threat-actor-tools.json
+++ b/elements/threat-actor-tools.json
@@ -55,6 +55,12 @@
     {
       "value": "Joy RAT"
     },
+    {
+      "value": "Lost Door RAT",
+      "synonyms": ["LostDoor RAT"],
+      "descriptions": "We recently came across a cyber attack that used a remote access Trojan (RAT) called Lost Door, a tool currently offered on social media sites. What also struck us the most about this RAT (detected as BKDR_LODORAT.A) is how it abuses the Port Forward feature in routers.",
+      "refs": ["http://blog.trendmicro.com/trendlabs-security-intelligence/lost-door-rat-accessible-customizable-attack-tool/"]
+    },
     {
       "value": "njRAT",
       "synonyms": ["Bladakindi"],