From 5b22aa7225e0ff1ff40bbbe9e63efee9767d0c59 Mon Sep 17 00:00:00 2001
From: Deborah Servili <deborah.servili@gmail.com>
Date: Mon, 14 May 2018 12:00:22 +0200
Subject: [PATCH] add Mettle botnet

---
 clusters/botnet.json | 12 +++++++++++-
 1 file changed, 11 insertions(+), 1 deletion(-)

diff --git a/clusters/botnet.json b/clusters/botnet.json
index 16c7e5c6..ade984dd 100644
--- a/clusters/botnet.json
+++ b/clusters/botnet.json
@@ -566,6 +566,16 @@
         ]
       },
       "uuid": "cdf1148c-5358-11e8-87e5-ab60d455597f"
+    },
+    {
+      "value": "Mettle",
+      "description": "Command-and-control panel and the scanner of this botnet is hosted on a server residing in Vietnam. Attackers have been utilizing an open-sourced Mettle attack module to implant malware on vulnerable routers.",
+      "meta": {
+        "refs": [
+          "https://thehackernews.com/2018/05/botnet-malware-hacking.html"
+        ]
+      },
+      "uuid": "77a308b6-575d-11e8-89a9-3f6a2a9c08bb"
     }
   ],
   "name": "Botnet",
@@ -576,5 +586,5 @@
   ],
   "description": "botnet galaxy",
   "uuid": "a91732f4-164a-11e8-924a-ffd4097eb03f",
-  "version": 4
+  "version": 5
 }