From 8f928d8eb38b506ffa170db5dae5398f55bc8008 Mon Sep 17 00:00:00 2001
From: Daniel Plohmann <daniel.plohmann@mailbox.org>
Date: Wed, 2 Feb 2022 09:35:53 +0100
Subject: [PATCH] adding Gamaredon alias Shuckworm used by Symantec

---
 clusters/threat-actor.json | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 892a58e..5178c5d 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -4200,7 +4200,8 @@
           "https://www.welivesecurity.com/2020/06/18/digging-up-invisimole-hidden-arsenal/"
         ],
         "synonyms": [
-          "Primitive Bear"
+          "Primitive Bear",
+          "Shuckworm"
         ]
       },
       "related": [