From d887659e510ee01011e5865ca6962891a88f78b7 Mon Sep 17 00:00:00 2001
From: Deborah Servili <deborah.servili@gmail.com>
Date: Tue, 5 Dec 2017 09:47:50 +0100
Subject: [PATCH] add Halloware ransomware

---
 clusters/ransomware.json | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index 38f1e78..c0d7179 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -8577,6 +8577,18 @@
           "Bad-Rabbit"
         ]
       }
+    },
+    {
+      "value": "Halloware",
+      "description": "A malware author by the name of Luc1F3R is peddling a new ransomware strain called Halloware for the lowly price of $40. Based on evidence gathered by Bleeping Computer, Luc1F3R started selling his ransomware this week, beginning Thursday.",
+      "meta": {
+        "refs": [
+          "https://www.bleepingcomputer.com/news/security/halloware-ransomware-on-sale-on-the-dark-web-for-only-40/"
+        ],
+        "extensions": [
+          "(Lucifer) [prepend]"
+        ]
+      }
     }
   ],
   "source": "Various",