From 2cd9cf28a25091d24724315b9d1ec9308873a5a0 Mon Sep 17 00:00:00 2001
From: Mathieu4141 <mathieu@feedly.com>
Date: Wed, 20 Dec 2023 03:40:25 -0800
Subject: [PATCH] [threat-actors] Add GambleForce

---
 clusters/threat-actor.json | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index cc51ce7..c5acd1c 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -13883,6 +13883,16 @@
       },
       "uuid": "afe5526e-e5e4-4b05-bc69-2bfb6785fc7e",
       "value": "UNC4736"
+    },
+    {
+      "description": "GambleForce is a threat actor specializing in SQL injection attacks. They have targeted over 20 websites in various sectors across multiple countries, compromising six companies. GambleForce utilizes publicly available pentesting tools and has been active since mid-September 2023.",
+      "meta": {
+        "refs": [
+          "https://www.group-ib.com/blog/gambleforce-gang/"
+        ]
+      },
+      "uuid": "94ce7925-1a37-4b02-a25b-b87a389c92b3",
+      "value": "GambleForce"
     }
   ],
   "version": 296