From 412f1885f29df6225b67b7f736de152ab9808a74 Mon Sep 17 00:00:00 2001
From: Mathieu4141 <mathieu@feedly.com>
Date: Mon, 22 Jan 2024 10:01:13 -0800
Subject: [PATCH] [threat-actors] Add Hezb aliases

---
 clusters/threat-actor.json | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index de524a3..d3b7b07 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -11078,7 +11078,11 @@
       "description": "Hezb is a group deploying cryptominers when new exploit are available for public facing vulnerabilities. The name is after the miner process they deploy.",
       "meta": {
         "refs": [
-          "https://www.pwndefend.com/2022/06/04/cve-2022-26134-honeypot-payload-analysis-example/"
+          "https://www.pwndefend.com/2022/06/04/cve-2022-26134-honeypot-payload-analysis-example/",
+          "https://asec.ahnlab.com/en/60440/"
+        ],
+        "synonyms": [
+          "Mimo"
         ]
       },
       "uuid": "fd82cd40-9306-4285-8fae-ad29a9711603",