From c78416eee14b57903c96d13f077cce096e338cff Mon Sep 17 00:00:00 2001
From: Deborah Servili <deborah.servili@gmail.com>
Date: Thu, 4 Oct 2018 10:09:34 +0200
Subject: [PATCH] update synonyms & attributions

---
 clusters/threat-actor.json | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 2958d02..4973a9d 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -2069,9 +2069,11 @@
           "APT 28",
           "APT28",
           "Pawn Storm",
+          "PawnStorm",
           "Fancy Bear",
           "Sednit",
           "TsarTeam",
+          "Tsar Team",
           "TG-4127",
           "Group-4127",
           "STRONTIUM",
@@ -4620,8 +4622,10 @@
           "Islamic State Hacking Division",
           "CCA",
           "United Cyber Caliphate",
-          "UUC"
-        ]
+          "UUC",
+          "CyberCaliphate"
+        ],
+        "country": "RU"
       },
       "uuid": "76f6ad4e-2ff3-4ccb-b81d-18162f290af0",
       "value": "Cyber Caliphate Army"
@@ -5917,5 +5921,5 @@
       ]
     }
   ],
-  "version": 68
+  "version": 69
 }