From 0d6399aa2b692a808b83b625f514331b7f3c8299 Mon Sep 17 00:00:00 2001
From: Mathieu Beligon <mathieu@feedly.com>
Date: Wed, 17 Aug 2022 12:04:32 -0700
Subject: [PATCH] Add ATK78 alias for Thrip

---
 clusters/threat-actor.json | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index cee83f3..6c8acdf 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -6448,10 +6448,12 @@
           "https://www.cfr.org/interactive/cyber-operations/thrip",
           "https://www.symantec.com/blogs/threat-intelligence/thrip-hits-satellite-telecoms-defense-targets",
           "https://attack.mitre.org/groups/G0076/",
-          "https://go.crowdstrike.com/rs/281-OBQ-266/images/Report2020CrowdStrikeGlobalThreatReport.pdf"
+          "https://go.crowdstrike.com/rs/281-OBQ-266/images/Report2020CrowdStrikeGlobalThreatReport.pdf",
+          "https://cyberthreat.thalesgroup.com/sites/default/files/2022-05/THALES%20THREAT%20HANDBOOK%202022%20Light%20Version_1.pdf"
         ],
         "synonyms": [
-          "G0076"
+          "G0076",
+          "UTK78"
         ]
       },
       "uuid": "98be4300-a9ef-11e8-9a95-bb9221083cfc",