From c36ddd75dbc55a0504f75205cc33100ea8de4a47 Mon Sep 17 00:00:00 2001
From: Mathieu4141 <mathieu@feedly.com>
Date: Tue, 7 Nov 2023 10:37:08 -0800
Subject: [PATCH] [threat-actors] Add Confucious

---
 clusters/threat-actor.json | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index b45dae3..2d6d1db 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -12734,6 +12734,18 @@
       },
       "uuid": "e89ebfcb-e7a3-4b2d-b0d7-399bb4904e27",
       "value": "Desorden Group"
+    },
+    {
+      "description": "Confucius is an APT organization funded by India. It has been carrying out cyber attacks since 2013. Its main targets are India's neighbouring countries such as Pakistan and China. It has a strong interest in targets in the fields of military, government and energy.",
+      "meta": {
+        "country": "IN",
+        "refs": [
+          "https://medium.com/@knownsec404team/apt-k-47-mysterious-elephant-a-new-apt-organization-in-south-asia-5c66f954477",
+          "https://blog.nsfocus.net/aptconfuciuspakistanibo/"
+        ]
+      },
+      "uuid": "54618130-55d3-4506-b62b-67f2dca12b04",
+      "value": "Confucious"
     }
   ],
   "version": 293