From 5afd6822155f13096a19cb68e5f1f300a8be12d3 Mon Sep 17 00:00:00 2001
From: Mathieu4141 <mathieu@feedly.com>
Date: Thu, 1 Feb 2024 11:02:00 -0800
Subject: [PATCH] [threat-actors] Add MosesStaff aliases

---
 clusters/threat-actor.json | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index f451f33..3be5954 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -10068,7 +10068,9 @@
           "https://www.fortinet.com/blog/threat-research/guard-your-drive-from-driveguard"
         ],
         "synonyms": [
-          "Moses Staff"
+          "Moses Staff",
+          "Marigold Sandstorm",
+          "DEV-0500"
         ]
       },
       "related": [