From 622c0502aa0c84c1c9727de60e52c875c0ab8ef9 Mon Sep 17 00:00:00 2001
From: Adam McHugh <adam@mchughsecurity.com>
Date: Sun, 17 Apr 2022 19:23:11 +0930
Subject: [PATCH] Ammended Conti ransomware entry with ACSC 2021-010 advisory
 data

---
 clusters/ransomware.json | 16 +++++++++++++++-
 1 file changed, 15 insertions(+), 1 deletion(-)

diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index 9026d276..7aae368a 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -23579,7 +23579,21 @@
     {
       "description": "ransomware",
       "uuid": "201eff54-d41e-4f70-916c-5dfb9301730a",
-      "value": "Conti"
+      "value": "Conti",
+      "refs": [
+        "https://www.cyber.gov.au/acsc/view-all-content/advisories/2021-010-acsc-ransomware-profile-conti",
+        ""
+      ],
+      "meta": {
+        "attribution-confidence": "100",
+        "country": "RU",
+        "extensions": [
+          ".conti"
+        ],
+        "ransomnotes": [
+          "All of your files are currently encrypted by CONTI ransomware."
+        ]
+      }
     },
     {
       "description": "ransomware",