From 808c2c3828e1f047fc7364f98f54bbd192368f19 Mon Sep 17 00:00:00 2001
From: StefanKelm <StefanKelm@users.noreply.github.com>
Date: Wed, 28 Oct 2020 12:52:06 +0100
Subject: [PATCH] Update threat-actor.json

Kimsuky
---
 clusters/threat-actor.json | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index a883be6..62b14c9 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -5179,7 +5179,8 @@
           "https://www.bloomberglaw.com/document/public/subdoc/X67FPNDOUBV9VOPS35A4864BFIU?imagename=1",
           "https://www.netscout.com/blog/asert/stolen-pencil-campaign-targets-academia",
           "https://unit42.paloaltonetworks.com/new-babyshark-malware-targets-u-s-national-security-think-tanks/",
-          "https://attack.mitre.org/groups/G0086/"
+          "https://attack.mitre.org/groups/G0086/",
+          "https://us-cert.cisa.gov/ncas/alerts/aa20-301a"
         ],
         "synonyms": [
           "Velvet Chollima",
@@ -8409,5 +8410,5 @@
       "value": "XDSpy"
     }
   ],
-  "version": 184
+  "version": 185
 }