diff --git a/vocabularies/threat-actor/cert-eu-motive.json b/vocabularies/threat-actor/cert-eu-motive.json
new file mode 100644
index 0000000..152fc70
--- /dev/null
+++ b/vocabularies/threat-actor/cert-eu-motive.json
@@ -0,0 +1,37 @@
+{
+  "values": [
+    {
+      "value": "Cybercrime"
+    },
+    {
+      "value": "Cyberwar"
+    },
+    {
+      "value": "Espionage"
+    },
+    {
+      "value": "Hacktivists"
+    },
+    {
+      "value": "Hacktivists-Nationalists"
+    },
+    {
+      "value": "Other"
+    },
+    {
+      "value": "Unknown"
+    },
+    {
+      "value": "Jihadism"
+    },
+    {
+      "value": "Censorhip"
+    }
+  ],
+  "version" : 1,
+  "description": "Motive vocab as defined by Cert EU.",
+  "source": "Cert EU",
+  "author": ["Cert EU"],
+  "uuid": "fe16ec3e-aff4-11e7-80d0-13582aacbd16",
+  "type": "threat-actor-cert-eu-motives-vocabulary"
+}