Merge pull request #266 from Delta-Sierra/master

small updates

clusters/threat-actor.json

@@ -381,7 +381,7 @@
           "Private sector",
           "Government"
         ],
-        "cfr-type-of-incident": "China",
+        "cfr-type-of-incident": "Espionage",
         "country": "CN",
         "refs": [
           "http://www.crowdstrike.com/blog/whois-numbered-panda/",
@@ -2568,13 +2568,17 @@
           "Germany",
           "Brazil",
           "Thailand",
-          "Australia"
+          "Australia",
+          "Cryptocurrency exchanges in South Korea"
         ],
         "cfr-target-category": [
           "Government",
           "Private sector"
         ],
-        "cfr-type-of-incident": "Espionage",
+        "cfr-type-of-incident": [
+          "Espionage",
+          "Sabotage"
+        ],
         "country": "KP",
         "refs": [
           "https://threatpost.com/operation-blockbuster-coalition-ties-destructive-attacks-to-lazarus-group/116422/",
@@ -2587,7 +2591,8 @@
           "https://www.bleepingcomputer.com/news/security/north-korean-hackers-are-up-to-no-good-again/",
           "https://www.cfr.org/interactive/cyber-operations/lazarus-group",
           "https://www.cfr.org/interactive/cyber-operations/operation-ghostsecret",
-          "https://securelist.com/operation-applejeus/87553/"
+          "https://securelist.com/operation-applejeus/87553/",
+          "https://www.cfr.org/interactive/cyber-operations/compromise-cryptocurrency-exchanges-south-korea"
         ],
         "synonyms": [
           "Operation DarkSeoul",
@@ -5856,5 +5861,5 @@
       "uuid": "bea5e256-bcc0-11e8-a478-bbf7e7585a1e"
     }
   ],
-  "version": 63
+  "version": 64
 }