From ee38ec722043f3f8c70da59ae452cdf4a12261e9 Mon Sep 17 00:00:00 2001
From: Deborah Servili <deborah.servili@gmail.com>
Date: Mon, 16 Dec 2019 13:36:00 +0100
Subject: [PATCH] add BitPaymer Synonsyms

---
 clusters/ransomware.json | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index 08efafb..462e7b5 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -13312,6 +13312,9 @@
         "payment-method": "Bitcoin Email",
         "refs": [
           "https://www.crowdstrike.com/blog/big-game-hunting-the-evolution-of-indrik-spider-from-dridex-wire-fraud-to-bitpaymer-targeted-ransomware/"
+        ],
+        "synonyms": [
+          "FriedEx","IEncrypt"
         ]
       },
       "uuid": "09fa0e0a-f0b2-46ea-8477-653e627b1c22",
@@ -13607,5 +13610,5 @@
       "value": "FTCode"
     }
   ],
-  "version": 74
+  "version": 75
 }