From ce0f4d5e4ac0c02fa4d31606a4db602da8aff37b Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Sat, 21 Oct 2017 15:14:42 +0200
Subject: [PATCH] SOCKET23 RAT added

---
 clusters/rat.json | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/clusters/rat.json b/clusters/rat.json
index 2641e21..02a0a56 100755
--- a/clusters/rat.json
+++ b/clusters/rat.json
@@ -2053,6 +2053,16 @@
         "date": "2017"
       }
     },
+    {
+      "value": "Socket23",
+      "description": "SOCKET23 was launched from his web site and immedi- ately infected major French corporations between August and October 1998. The virus (distributing the Trojan) was known as W32/HLLP.DeTroie.A (alias W32/Cheval.TCV).  Never had a virus so disrupted French industry. The author quickly offered his own remover and made his apologies on his web site (now suppressed). Jean-Christophe X (18) was arrested on Tuesday 15 June 1999 in the Paris area and placed under judicial investigation for ‘fraudulent intrusion of data in a data processing system, suppression and fraudulent modification of data’",
+      "meta": {
+        "refs": [
+          "https://www.virusbulletin.com/uploads/pdf/magazine/1999/199908.pdf"
+        ],
+        "date": "1998"
+      }
+    },
     {
       "value": "PowerRAT",
       "meta": {