From 897c8a0af72873c793a7fb803813b5d9072204cf Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Tue, 30 Aug 2016 10:10:43 +0200
Subject: [PATCH] Ozone RAT added

---
 elements/threat-actor-tools.json | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/elements/threat-actor-tools.json b/elements/threat-actor-tools.json
index bc9fb22f..513e92f1 100644
--- a/elements/threat-actor-tools.json
+++ b/elements/threat-actor-tools.json
@@ -20,6 +20,11 @@
     {
       "value": "Torn RAT"
     },
+    {
+      "value": "OzoneRAT",
+      "refs": ["https://blog.fortinet.com/2016/08/29/german-speakers-targeted-by-spam-leading-to-ozone-rat"],
+      "synonyms": ["Ozone RAT","ozonercp"]
+    },
     {
       "value": "ZeGhost"
     },