From e95fbb571d6ac5314af51e55a503deb61cc4112a Mon Sep 17 00:00:00 2001
From: StefanKelm <StefanKelm@users.noreply.github.com>
Date: Fri, 25 Sep 2020 11:52:34 +0200
Subject: [PATCH] Update threat-actor.json

GADOLINIUM
---
 clusters/threat-actor.json | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 733c5f0..8863956 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -5813,7 +5813,8 @@
           "https://intrusiontruth.wordpress.com/2020/01/15/hainan-xiandun-technology-company-is-apt40",
           "https://www.secureworks.com/research/threat-profiles/bronze-mohawk",
           "https://www.mycert.org.my/portal/advisory?id=MA-774.022020",
-          "https://www.elastic.co/blog/advanced-techniques-used-in-malaysian-focused-apt-campaign"
+          "https://www.elastic.co/blog/advanced-techniques-used-in-malaysian-focused-apt-campaign",
+          "https://www.microsoft.com/security/blog/2020/09/24/gadolinium-detecting-empires-cloud/"
         ],
         "synonyms": [
           "TEMP.Periscope",
@@ -8388,5 +8389,5 @@
       "value": "Fox Kitten"
     }
   ],
-  "version": 180
+  "version": 181
 }