Merge pull request #259 from botherder/country-sync

Synced country codes with suspected state sponsor

clusters/threat-actor.json

@@ -338,6 +338,7 @@
           "Private sector"
         ],
         "cfr-type-of-incident": "Espionage",
+        "country": "KP",
         "refs": [
           "https://securelist.com/blog/research/71713/darkhotels-attacks-in-2015/",
           "https://blogs.technet.microsoft.com/mmpc/2016/06/09/reverse-engineering-dubnium-2",
@@ -2842,6 +2843,7 @@
           "Military"
         ],
         "cfr-type-of-incident": "Espionage",
+        "country": "IN",
         "refs": [
           "https://securelist.com/blog/research/75328/the-dropping-elephant-actor/",
           "http://www.symantec.com/connect/blogs/patchwork-cyberespionage-group-expands-targets-governments-wide-range-industries",
@@ -3028,6 +3030,7 @@
           "Military"
         ],
         "cfr-type-of-incident": "Espionage",
+        "country": "US",
         "refs": [
           "https://securelist.com/analysis/publications/75533/faq-the-projectsauron-apt/",
           "https://www.cfr.org/interactive/cyber-operations/project-sauron"
@@ -3801,6 +3804,7 @@
           "Civil society"
         ],
         "cfr-type-of-incident": "Espionage",
+        "country": "VN",
         "refs": [
           "https://www.fireeye.com/blog/threat-research/2017/05/cyber-espionage-apt32.html",
           "https://www.cybereason.com/labs-operation-cobalt-kitty-a-large-scale-apt-in-asia-carried-out-by-the-oceanlotus-group/",
@@ -4461,6 +4465,7 @@
           "Private sector"
         ],
         "cfr-type-of-incident": "Espionage",
+        "country": "ES",
         "refs": [
           "https://securelist.com/blog/research/58254/the-caretomask-apt-frequently-asked-questions/",
           "https://www.cfr.org/interactive/cyber-operations/careto"
@@ -4819,6 +4824,7 @@
           "Government"
         ],
         "cfr-type-of-incident": "Espionage",
+        "country": "IR",
         "refs": [
           "https://researchcenter.paloaltonetworks.com/2017/11/unit42-muddying-the-water-targeted-attacks-in-the-middle-east/",
           "https://www.cfr.org/interactive/cyber-operations/muddywater"
@@ -5260,6 +5266,7 @@
           "Private sector"
         ],
         "cfr-type-of-incident": "Espionage",
+        "country": "IR",
         "mode-of-operation": "IT network limited, information gathering against industrial orgs",
         "refs": [
           "https://dragos.com/adversaries.html",
@@ -5411,7 +5418,8 @@
         "cfr-target-category": [
           "Government",
           "Civil society"
-        ]
+        ],
+        "country": "CN"
       },
       "uuid": "79c7c7e0-79d5-11e8-9b9c-1ff96be20c0b",
       "value": "RANCOR"
@@ -5496,7 +5504,8 @@
         "cfr-target-category": [
           "Government",
           "Private sector"
-        ]
+        ],
+        "country": "CN"
       },
       "uuid": "3f3ff6de-a6a7-11e8-92b4-3743eb1c7762"
     },
@@ -5586,7 +5595,8 @@
         "cfr-type-of-incident": "Espionage",
         "cfr-target-category": [
           "Private sector"
-        ]
+        ],
+        "country": "CN"
       },
       "uuid": "9cebfaa8-a797-11e8-99e0-3ffa312b9a10",
       "related": [
@@ -5627,7 +5637,8 @@
         "cfr-type-of-incident": "Espionage",
         "cfr-target-category": [
           "Civil society"
-        ]
+        ],
+        "country": "CN"
       },
       "uuid": "36ee04f4-a9df-11e8-b92b-d7ddfd3a8896",
       "related": [
@@ -5654,7 +5665,8 @@
         "cfr-type-of-incident": "Espionage",
         "cfr-target-category": [
           "Civil society"
-        ]
+        ],
+        "country": "CN"
       },
       "uuid": "78bf726c-a9e6-11e8-9e43-77249a2f7339"
     },
@@ -5698,7 +5710,8 @@
         "cfr-target-category": [
           "Government",
           "Civil society"
-        ]
+        ],
+        "country": "PK"
       },
       "uuid": "f82b352e-a9f8-11e8-8be8-fbcf6eddd58c"
     },