From 48ffaa8ce185dcbdb9dd6cdadace91e95c242161 Mon Sep 17 00:00:00 2001
From: StefanKelm <StefanKelm@users.noreply.github.com>
Date: Wed, 18 Nov 2020 12:10:23 +0100
Subject: [PATCH] Update threat-actor.json

Lazarus
---
 clusters/threat-actor.json | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 579b407..e55f1d3 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -3081,7 +3081,8 @@
           "https://www.zdnet.com/article/north-korean-hackers-infiltrate-chiles-atm-network-after-skype-job-interview/",
           "https://blogs.jpcert.or.jp/en/2020/08/Lazarus-malware.html",
           "https://www.secureworks.com/research/threat-profiles/nickel-gladstone",
-          "https://blogs.jpcert.or.jp/en/2020/09/BLINDINGCAN.html"
+          "https://blogs.jpcert.or.jp/en/2020/09/BLINDINGCAN.html",
+          "https://www.welivesecurity.com/2020/11/16/lazarus-supply-chain-attack-south-korea/"
         ],
         "synonyms": [
           "Operation DarkSeoul",
@@ -8496,5 +8497,5 @@
       "value": "Operation Skeleton Key"
     }
   ],
-  "version": 188
+  "version": 189
 }