From a6d5383adfe14933def7bf9c81d4903a741e6ecc Mon Sep 17 00:00:00 2001
From: Deborah Servili <deborah.servili@gmail.com>
Date: Wed, 18 Oct 2017 15:43:12 +0200
Subject: [PATCH] add synonym in tool galaxy

---
 clusters/tool.json | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/clusters/tool.json b/clusters/tool.json
index 28dea06..0416b74 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -2616,6 +2616,9 @@
       "meta": {
         "refs": [
           "https://www.fireeye.com/blog/threat-research/2017/04/cve-2017-0199_useda.html"
+        ],
+        "synonyms": [
+            "BlackOasis"
         ]
       },
       "description": "Though we have not identified the targets, FINSPY is sold by Gamma Group to multiple nation-state clients, and we assess with moderate confidence that it was being used along with the zero-day to carry out cyber espionage.",