From 22046a1eae95582b1d26425240bed288928e888a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=BCrgen=20L=C3=B6hel?= <juergen.loehel@inlyse.com>
Date: Tue, 18 Jan 2022 13:16:06 -0600
Subject: [PATCH] Adds WhisperGate
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Jürgen Löhel <juergen.loehel@inlyse.com>
---
 clusters/ransomware.json | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index 080a0f2..539bf91 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -24211,7 +24211,20 @@
       },
       "uuid": "fe7e4df0-97b9-4dd2-b3f8-79404fc8272d",
       "value": "Ragnarok"
+    },
+    {
+      "description": "Destructive malware deployed against targets in Ukraine in January 2022.",
+      "meta": {
+        "date": "January 2022",
+        "refs": [
+          "https://malpedia.caad.fkie.fraunhofer.de/details/win.whispergate",
+          "https://www.cadosecurity.com/resources-for-dfir-professionals-responding-to-whispergate-malware/",
+          "https://www.microsoft.com/security/blog/2022/01/15/destructive-malware-targeting-ukrainian-organizations/"
+        ]
+      },
+      "uuid": "feb5fa26-bad4-46da-921d-986d2fd81a40",
+      "value": "WhisperGate"
     }
   ],
-  "version": 98
+  "version": 99
 }