From 43f95874692812035790d97922214ebf42915221 Mon Sep 17 00:00:00 2001
From: Mathieu4141 <mathieu@feedly.com>
Date: Thu, 1 Feb 2024 11:02:02 -0800
Subject: [PATCH] [threat-actors] Add POLONIUM aliases

---
 clusters/threat-actor.json | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index c51341d..ab881e1 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -10461,7 +10461,11 @@
         "cfr-type-of-incident": "Espionage",
         "country": "LB",
         "refs": [
-          "https://www.microsoft.com/security/blog/2022/06/02/exposing-polonium-activity-and-infrastructure-targeting-israeli-organizations/"
+          "https://www.microsoft.com/security/blog/2022/06/02/exposing-polonium-activity-and-infrastructure-targeting-israeli-organizations/",
+          "https://www.deepinstinct.com/blog/polonium-apt-group-uncovering-new-elements"
+        ],
+        "synonyms": [
+          "Plaid Rain"
         ]
       },
       "related": [