From 6364aaca649b6ad6d2388a0ac493670dbe1a6cbe Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Tue, 6 Sep 2016 23:44:02 +0200
Subject: [PATCH] Pirpi reference added

---
 elements/threat-actor-tools.json | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/elements/threat-actor-tools.json b/elements/threat-actor-tools.json
index a226a7b..e495eb1 100644
--- a/elements/threat-actor-tools.json
+++ b/elements/threat-actor-tools.json
@@ -108,7 +108,8 @@
       "value": "WEBC2"
     },
     {
-      "value": "Pirpi"
+      "value": "Pirpi",
+      "refs": ["http://www.symantec.com/connect/blogs/buckeye-cyberespionage-group-shifts-gaze-us-hong-kong"]
     },
     {
       "value": "RARSTONE"