From 9ec76ae185cd92f4d5877850d1a3a9c925684ae0 Mon Sep 17 00:00:00 2001
From: Jeroen Pinoy <jeroen.pinoy@fortitude.ninja>
Date: Sun, 3 Oct 2021 23:30:20 +0200
Subject: [PATCH] Add threat actor common raven

---
 clusters/threat-actor.json | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index cd0af95e..e4eb11c7 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -8862,7 +8862,18 @@
       },
       "uuid": "e7aff414-fc21-43eb-ad5d-9a46e07be9f5",
       "value": "BelialDemon"
+    },
+    {
+      "description": "Threat actor Common Raven has been actively targeting financial sector institutions, compromising their SWIFT payment infrastructure to send out fraudulent payments.",
+      "meta": {
+        "refs": [
+          "https://www.rewterz.com/rewterz-news/rewterz-threat-alert-common-raven-iocs",
+          "https://www2.swift.com/isac/report/10118"
+        ]
+      },
+      "uuid": "da581c60-7c3d-4de6-b54c-cafea1c58389",
+      "value": "Common Raven"
     }
   ],
-  "version": 206
+  "version": 207
 }