First entries for MSFT threat actor groups

clusters/threat-actor.json

@@ -2447,7 +2447,8 @@
           "ATK6",
           "ITG15",
           "BROMINE",
-          "Blue Kraken"
+          "Blue Kraken",
+          "Ghost Blizzard"
         ]
       },
       "related": [
@@ -2875,7 +2876,9 @@
           "ATK3",
           "G0032",
           "ATK117",
-          "G0082"
+          "G0082",
+          "COPERNICIUM",
+          "Sapphire Sleet"
         ]
       },
       "related": [
@@ -4056,7 +4059,8 @@
           "Shuckworm",
           "Trident Ursa",
           "UAC-0010",
-          "Winterflounder"
+          "Winterflounder",
+          "Aqua Blizzard"
         ]
       },
       "related": [
@@ -4284,7 +4288,8 @@
           "TIN WOODLAWN",
           "BISMUTH",
           "ATK17",
-          "G0050"
+          "G0050",
+          "Canvas Cyclone"
         ]
       },
       "related": [
@@ -6499,7 +6504,8 @@
           "G0092",
           "ATK103",
           "Hive0065",
-          "CHIMBORAZO"
+          "CHIMBORAZO",
+          "Spandex Tempest"
         ]
       },
       "uuid": "03c80674-35f8-4fe0-be2b-226ed0fcd69f",
@@ -7469,7 +7475,8 @@
           "G0044",
           "Earth Baku",
           "Amoeba",
-          "HOODOO"
+          "HOODOO",
+          "Brass Typhoon"
         ]
       },
       "related": [
@@ -7506,7 +7513,9 @@
           "https://www.darkreading.com/threat-intelligence/iranian-government-hackers-target-us-veterans/d/d-id/1335897"
         ],
         "synonyms": [
-          "IMPERIAL KITTEN"
+          "IMPERIAL KITTEN",
+          "CURIUM",
+          "Crimson Sandstorm"
         ]
       },
       "uuid": "5f108484-db7f-11e9-aaa4-fb0176425734",
@@ -9359,7 +9368,8 @@
           "FISHMONGER",
           "BRONZE UNIVERSITY",
           "AQUATIC PANDA",
-          "Red Dev 10"
+          "Red Dev 10",
+          "Charcoal Typhoon"
         ]
       },
       "uuid": "39150b30-61af-4d9c-9682-1595e145f3c1",
@@ -10638,6 +10648,36 @@
       },
       "uuid": "8ca38564-5515-45f5-9f3b-a4091546e10b",
       "value": "Anonymous Sudan"
+    },
+    {
+      "uuid": "200bb275-bd5f-4514-90b7-e4a35fe19342",
+      "value": "Pink Sandstorm",
+      "meta":{
+        "synonyms": [
+          "Agrius",
+          "Deadwood",
+          "BlackShadow",
+          "SharpBoys"
+        ]
+      }
+    },
+    {
+      "uuid": "22f23824-8148-408d-9e5b-e28632a8d0b7",
+      "value": "Smoke Sandstorm",
+      "meta": {
+        "synonyms": [
+          "BOHRIUM"
+        ]
+      }
+    },
+    {
+      "uuid": "bc046b5f-29ae-4e1d-92db-5a83a8088033",
+      "value": "Ruby Sleet",
+      "meta": {
+        "synonyms": [
+          "CERIUM"
+        ]
+      }
     }
   ],
   "version": 263