From f4584f39005c176a1f1c06846903b3c1f6e3519c Mon Sep 17 00:00:00 2001
From: Thanat0s <Thanspam@trollprod.org>
Date: Sun, 26 Feb 2017 22:41:51 +0100
Subject: [PATCH] pimp xscontrol

---
 clusters/tool.json | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/clusters/tool.json b/clusters/tool.json
index 72f1a37..3025a76 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -460,7 +460,17 @@
       }
     },
     {
-      "value": "XSControl"
+      "value": "XSControl",
+      "description": "Backdoor user by he Naikon APT group",
+      "meta": {
+        "refs": [
+          "https://securelist.com/analysis/publications/69953/the-naikon-apt/",
+          "https://kasperskycontenthub.com/securelist/files/2015/05/TheNaikonAPT-MsnMM.pdf"
+        ],
+        "type": [
+          "Backdoor"
+        ]
+      }
     },
     {
       "value": "NETEAGLE"
@@ -628,6 +638,9 @@
         ],
         "refs": [
           "https://www2.fireeye.com/rs/848-DID-242/images/APT28-Center-of-Storm-2017.pdf"
+        ],
+        "type": [
+          "Backdoor"
         ]
       }
     },