From 41a7a363175bd138e12a0c574c950ed4116e7bbb Mon Sep 17 00:00:00 2001
From: StefanKelm <StefanKelm@users.noreply.github.com>
Date: Mon, 2 Nov 2020 17:30:25 +0100
Subject: [PATCH] Update threat-actor.json

Kimsuky
---
 clusters/threat-actor.json | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index ad9a2d2..e0dc474 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -5181,7 +5181,8 @@
           "https://www.netscout.com/blog/asert/stolen-pencil-campaign-targets-academia",
           "https://unit42.paloaltonetworks.com/new-babyshark-malware-targets-u-s-national-security-think-tanks/",
           "https://attack.mitre.org/groups/G0086/",
-          "https://us-cert.cisa.gov/ncas/alerts/aa20-301a"
+          "https://us-cert.cisa.gov/ncas/alerts/aa20-301a",
+          "https://www.cybereason.com/blog/back-to-the-future-inside-the-kimsuky-kgh-spyware-suite"
         ],
         "synonyms": [
           "Velvet Chollima",
@@ -8494,5 +8495,5 @@
       "value": "Operation Skeleton Key"
     }
   ],
-  "version": 186
+  "version": 187
 }