From 6c4c2696b6ba0fb7cd92b901d4d2cdcf7223dbd1 Mon Sep 17 00:00:00 2001
From: Daniel Plohmann <daniel.plohmann@mailbox.org>
Date: Fri, 25 Oct 2024 14:08:53 +0200
Subject: [PATCH] add APT37 alias used by AhnLab (TA-RedAnt)

---
 clusters/threat-actor.json | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index c11735d..cc95b8f 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -6422,7 +6422,8 @@
           "https://securelist.com/operation-daybreak/75100/",
           "https://securelist.com/scarcruft-continues-to-evolve-introduces-bluetooth-harvester/90729/",
           "https://threatpost.com/scarcruft-apt-group-used-latest-flash-zero-day-in-two-dozen-attacks/118642/",
-          "https://unit42.paloaltonetworks.com/atoms/moldypisces/"
+          "https://unit42.paloaltonetworks.com/atoms/moldypisces/",
+          "https://asec.ahnlab.com/en/83877/"
         ],
         "synonyms": [
           "APT 37",
@@ -6439,7 +6440,8 @@
           "Venus 121",
           "ATK4",
           "G0067",
-          "Moldy Pisces"
+          "Moldy Pisces",
+          "TA-RedAnt"
         ]
       },
       "related": [
@@ -16987,5 +16989,5 @@
       "value": "TaskMasters"
     }
   ],
-  "version": 317
+  "version": 318
 }