diff --git a/vocabularies/threat-actor/cert-eu-motive.json b/vocabularies/threat-actor/cert-eu-motive.json
new file mode 100644
index 0000000..62ad324
--- /dev/null
+++ b/vocabularies/threat-actor/cert-eu-motive.json
@@ -0,0 +1,37 @@
+{
+  "values": [
+    {
+      "value": "Cybercrime",
+    },
+    {
+      "value": "Cyberwar",
+    },
+    {
+      "value": "Espionage",
+    },
+    {
+      "value": "Hacktivists",
+    },
+    {
+      "value": "Hacktivists-Nationalists",
+    },
+    {
+      "value": "Other",
+    },
+    {
+      "value": "Unknown",
+    },
+    {
+      "value": "Jihadism",
+    },
+    {
+      "value": "Censorhip",
+    }
+  ],
+  "version" : 1,
+  "description": "Motive vocab as defined by Cert EU.",
+  "source": "Cert EU",
+  "author": ["Cert EU"],
+  "uuid": "fe16ec3e-aff4-11e7-80d0-13582aacbd16",
+  "type": "threat-actor-cert-eu-motives-vocabulary"
+}