From c2b0c1fe0cbc6f7d4f5821f4e5db4877f2a90ea5 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Tue, 20 Sep 2016 07:37:31 +0200
Subject: [PATCH] Suckfly added

---
 elements/adversary-groups.json | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/elements/adversary-groups.json b/elements/adversary-groups.json
index 0aae8ab..539d15f 100644
--- a/elements/adversary-groups.json
+++ b/elements/adversary-groups.json
@@ -939,6 +939,11 @@
        "value": "GCMAN",
        "description": "GCMAN is a threat group that focuses on targeting banks for the purpose of transferring money to e-currency services.",
        "refs": ["https://securelist.com/blog/research/73638/apt-style-bank-robberies-increase-with-metel-gcman-and-carbanak-2-0-attacks/"]
+     },
+     {
+       "value": "Suckfly",
+       "description": "Suckfly is a China-based threat group that has been active since at least 2014",
+       "refs": ["http://www.symantec.com/connect/blogs/suckfly-revealing-secret-life-your-code-signing-certificates"]
      }
   ]
 }