From 3369270bdb593bac8c6a56a2d4cb187b649e81a6 Mon Sep 17 00:00:00 2001
From: Deborah Servili <deborah.servili@gmail.com>
Date: Wed, 8 Nov 2017 15:05:37 +0100
Subject: [PATCH] add Sowbug group

---
 clusters/threat-actor.json | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 1d7e6222..98781a1d 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -2209,6 +2209,15 @@
         ]
       },
       "value": "Mana Team"
+    },
+    {
+      "meta": {
+        "refs": [
+          "https://www.symantec.com/connect/blogs/sowbug-cyber-espionage-group-targets-south-american-and-southeast-asian-governments"
+        ]
+      },
+      "description": "Sowbug has been conducting highly targeted cyber attacks against organizations in South America and Southeast Asia and appears to be heavily focused on foreign policy institutions and diplomatic targets. Sowbug has been seen mounting classic espionage attacks by stealing documents from the organizations it infiltrates. ",
+      "value": "Sowbug"
     }
   ],
   "name": "Threat actor",