From 9225666b920f04654ecd1351b723711d16edba11 Mon Sep 17 00:00:00 2001
From: Deborah Servili <deborah.servili@gmail.com>
Date: Fri, 5 Oct 2018 11:09:45 +0200
Subject: [PATCH] add CoalaBot + Kraken Cryptor Ransmware + refs

---
 clusters/exploit-kit.json |  3 ++-
 clusters/tool.json        | 11 ++++++++++-
 2 files changed, 12 insertions(+), 2 deletions(-)

diff --git a/clusters/exploit-kit.json b/clusters/exploit-kit.json
index 78b25e0..9b7e91a 100644
--- a/clusters/exploit-kit.json
+++ b/clusters/exploit-kit.json
@@ -45,7 +45,8 @@
       "meta": {
         "refs": [
           "https://www.nao-sec.org/2018/09/hello-fallout-exploit-kit.html",
-          "https://www.bleepingcomputer.com/news/security/new-fallout-exploit-kit-drops-gandcrab-ransomware-or-redirects-to-pups/"
+          "https://www.bleepingcomputer.com/news/security/new-fallout-exploit-kit-drops-gandcrab-ransomware-or-redirects-to-pups/",
+          "https://www.bleepingcomputer.com/news/security/fallout-exploit-kit-now-installing-the-kraken-cryptor-ransomware/"
         ],
         "status": "Active",
         "synonyms": [
diff --git a/clusters/tool.json b/clusters/tool.json
index dccdb00..5f6c6f9 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -5864,7 +5864,16 @@
         ]
       },
       "uuid": "8a2ae47a-c7b2-11e8-b223-ab4d8f78f3ef"
+    },
+    {
+      "value": "CoalaBot",
+      "meta": {
+        "refs:": [
+          "https://malware.dontneedcoffee.com/2017/10/coalabot-http-ddos-bot.html"
+        ]
+      },
+      "uuid": "92628a72-c874-11e8-a094-ebbb3bd1f412"
     }
   ],
-  "version": 92
+  "version": 93
 }