From 5101c5a8282fc5882de7bb28b5dfe963bc0fc413 Mon Sep 17 00:00:00 2001
From: Daniel Plohmann <daniel.plohmann@mailbox.org>
Date: Mon, 11 May 2020 15:37:38 +0200
Subject: [PATCH] msft name: BORON for APT3

as per tweet: https://twitter.com/bkMSFT/status/1259578051962306562
---
 clusters/threat-actor.json | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index cfaa0f0..6bcfa38 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -346,7 +346,8 @@
           "UPS Team",
           "APT3",
           "Buckeye",
-          "Boyusec"
+          "Boyusec",
+          "BORON"
         ]
       },
       "related": [