From 43a2c7f0efd01bc0ab35ac611277c426b7629001 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Mon, 9 Jul 2018 14:25:19 +0200
Subject: [PATCH] chg: [botnet] Xor DDoS added

---
 clusters/botnet.json | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/clusters/botnet.json b/clusters/botnet.json
index 86c37240..a7862a88 100644
--- a/clusters/botnet.json
+++ b/clusters/botnet.json
@@ -2,7 +2,7 @@
   "description": "botnet galaxy",
   "uuid": "a91732f4-164a-11e8-924a-ffd4097eb03f",
   "source": "MISP Project",
-  "version": 7,
+  "version": 8,
   "values": [
     {
       "meta": {
@@ -513,6 +513,16 @@
       "value": "Mirai",
       "uuid": "fcdfd4af-da35-49a8-9610-19be8a487185"
     },
+    {
+      "value": "XorDDoS",
+      "uuid": "5485d149-79b5-451e-b48c-a020eced3515",
+      "description": "XOR DDOS is a Linux trojan used to perform large-scale DDoS",
+      "meta": {
+        "refs": [
+          "https://en.wikipedia.org/wiki/Xor_DDoS"
+        ]
+      }
+    },
     {
       "meta": {
         "refs": [