From a4487078a38d697394cfdd4e1e77d3f488f80823 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Sat, 2 Apr 2016 09:39:05 +0200
Subject: [PATCH] Backdoor.Dripion added

---
 elements/threat-actor-tools.json | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/elements/threat-actor-tools.json b/elements/threat-actor-tools.json
index 46f58d8..d6069a0 100644
--- a/elements/threat-actor-tools.json
+++ b/elements/threat-actor-tools.json
@@ -18,6 +18,12 @@
     {
       "value": "ZeGhost"
     },
+    {
+      "value": "Backdoor.Dripion",
+      "description": "Backdoor.Dripion was custom developed, deployed in a highly targeted fashion, and used command and control servers disguised as antivirus company websites.",
+      "refs": ["http://www.symantec.com/connect/blogs/taiwan-targeted-new-cyberespionage-back-door-trojan"],
+      "synonyms": ["Dripion"]
+    },
     {
       "value": "Elise Backdoor",
       "synonyms": ["Elise"]