From bc0bf1ca9f509056a6a7b6f4dd8e736fd389de99 Mon Sep 17 00:00:00 2001
From: Nils Kuhnert <Nils.Kuhnert@cert-bund.de>
Date: Mon, 29 Oct 2018 09:03:30 +0100
Subject: [PATCH] Corrected DarkHotel threat actor entry

---
 clusters/threat-actor.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 2534fbfc..d36667c8 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -346,7 +346,7 @@
           "Private sector"
         ],
         "cfr-type-of-incident": "Espionage",
-        "country": "KP",
+        "country": "KR",
         "refs": [
           "https://securelist.com/blog/research/71713/darkhotels-attacks-in-2015/",
           "https://blogs.technet.microsoft.com/mmpc/2016/06/09/reverse-engineering-dubnium-2",