[threat-actors] Add POLONIUM aliases

2024-02-01 11:02:02 -08:00 · 2024-02-01 11:02:02 -08:00 · 43f9587469
parent ae82f07fd8
commit 43f9587469
1 changed files with 5 additions and 1 deletions
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@ -10461,7 +10461,11 @@
        "cfr-type-of-incident": "Espionage",
        "country": "LB",
        "refs": [
-          "https://www.microsoft.com/security/blog/2022/06/02/exposing-polonium-activity-and-infrastructure-targeting-israeli-organizations/"
+          "https://www.microsoft.com/security/blog/2022/06/02/exposing-polonium-activity-and-infrastructure-targeting-israeli-organizations/",
+          "https://www.deepinstinct.com/blog/polonium-apt-group-uncovering-new-elements"
+        ],
+        "synonyms": [
+          "Plaid Rain"
        ]
      },
      "related": [