From 039fc91bd637542560af0499f3a94af105f850da Mon Sep 17 00:00:00 2001
From: Deborah Servili <deborah.servili@gmail.com>
Date: Wed, 12 Sep 2018 14:27:09 +0200
Subject: [PATCH] add description for sigma ransomware

---
 clusters/ransomware.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index fd67db24..9fe0606e 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -10541,7 +10541,7 @@
     },
     {
       "value": "Sigma Ransomware",
-      "description": "",
+      "description": "Today one of our volunteers, Aura, told me about a new new malspam campaign pretending to be from Craigslist that is under way and distributing the Sigma Ransomware. These spam emails contain password protected Word or RTF documents that download the Sigma Ransomware executable from a remote site and install it on a recipients computer.",
       "meta": {
         "refs": [
           "https://www.bleepingcomputer.com/news/security/sigma-ransomware-being-distributed-using-fake-craigslist-malspam/"