From d37db31a75ecf8883b33d1be0aef6f9646c1791b Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Sat, 17 Dec 2016 09:51:13 +0100
Subject: [PATCH] Operation Iron Tiger added as synonym

---
 clusters/threat-actor.json | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index be98f19..08f0f9f 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -341,7 +341,8 @@
           "TEMP.Hippo",
           "Group 35",
           "HIPPOTeam",
-          "APT27"
+          "APT27",
+          "Operation Iron Tiger"
         ],
         "country": "CN",
         "refs": [
@@ -1225,5 +1226,5 @@
   ],
   "description": "Known or estimated adversary groups targeting organizations and employees. Adversary groups are regularly confused with their initial operation or campaign.",
   "uuid": "7cdff317-a673-4474-84ec-4f1754947823",
-  "version": 5
+  "version": 6
 }