From 15b5f4c881c7691696f7d35f72dec89190d2427f Mon Sep 17 00:00:00 2001
From: StefanKelm <StefanKelm@users.noreply.github.com>
Date: Mon, 30 Nov 2020 11:49:23 +0100
Subject: [PATCH] Update threat-actor.json

APT27
---
 clusters/threat-actor.json | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index de38f56..23c5178 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -6231,7 +6231,8 @@
           "https://labs.bitdefender.com/2018/02/operation-pzchao-a-possible-return-of-the-iron-tiger-apt/",
           "https://securelist.com/luckymouse-hits-national-data-center/86083/",
           "https://attack.mitre.org/groups/G0027/",
-          "https://www.secureworks.com/research/threat-profiles/bronze-union"
+          "https://www.secureworks.com/research/threat-profiles/bronze-union",
+          "https://www.ptsecurity.com/ww-en/analytics/pt-esc-threat-intelligence/incident-response-polar-ransomware-apt27/"
         ],
         "synonyms": [
           "Emissary Panda",
@@ -8498,5 +8499,5 @@
       "value": "Operation Skeleton Key"
     }
   ],
-  "version": 190
+  "version": 191
 }