From aa132ca58f54baab09367753f4d1ddc446c67ac5 Mon Sep 17 00:00:00 2001
From: StefanKelm <StefanKelm@users.noreply.github.com>
Date: Thu, 14 Nov 2019 14:57:05 +0100
Subject: [PATCH] new refs for APT33

---
 clusters/threat-actor.json | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 10ea810..3086723 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -1983,7 +1983,10 @@
         "attribution-confidence": "50",
         "country": "IR",
         "refs": [
-          "https://www.fireeye.com/blog/threat-research/2017/09/apt33-insights-into-iranian-cyber-espionage.html"
+          "https://www.fireeye.com/blog/threat-research/2017/09/apt33-insights-into-iranian-cyber-espionage.html",
+          "https://blog.trendmicro.com/trendlabs-security-intelligence/more-than-a-dozen-obfuscated-apt33-botnets-used-for-extreme-narrow-targeting/",
+          "https://www.brighttalk.com/webcast/10703/275683",
+          "https://www.symantec.com/blogs/threat-intelligence/elfin-apt33-espionage"
         ],
         "synonyms": [
           "APT 33",
@@ -7795,5 +7798,5 @@
       "value": "Calypso group"
     }
   ],
-  "version": 141
+  "version": 142
 }