From 2a6bf0010c07b95d4d5f35b2c7eecdc300be2fba Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Thu, 18 Apr 2024 06:20:48 +0200
Subject: [PATCH 1/2] chg: [threat-actor] APT44 added

Ref: https://services.google.com/fh/files/misc/apt44-unearthing-sandworm.pdf
---
 clusters/threat-actor.json | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index bcc884d..cceafcf 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -2828,7 +2828,9 @@
           "https://blog.google/threat-analysis-group/fog-of-war-how-the-ukraine-conflict-transformed-the-cyber-threat-landscape/",
           "https://www.recordedfuture.com/russia-nexus-uac-0113-emulating-telecommunication-providers-in-ukraine",
           "https://cert.gov.ua/article/405538",
-          "https://cip.gov.ua/services/cm/api/attachment/download?id=60068"
+          "https://cip.gov.ua/services/cm/api/attachment/download?id=60068",
+          "https://cloud.google.com/blog/topics/threat-intelligence/apt44-unearthing-sandworm?linkId=9627235",
+          "https://services.google.com/fh/files/misc/apt44-unearthing-sandworm.pdf"
         ],
         "synonyms": [
           "Quedagh",
@@ -2843,7 +2845,8 @@
           "FROZENBARENTS",
           "UAC-0113",
           "Seashell Blizzard",
-          "UAC-0082"
+          "UAC-0082",
+          "APT44"
         ],
         "targeted-sector": [
           "Electric",
@@ -15548,5 +15551,5 @@
       "value": "UNC5174"
     }
   ],
-  "version": 305
+  "version": 306
 }

From 94aa7e20a23537efbae3b6c29afa8d9512b85a57 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Thu, 18 Apr 2024 06:44:13 +0200
Subject: [PATCH 2/2] new: [target-information] Sahrawi Arab Democratic
 Republic added

---
 clusters/target-information.json | 22 +++++++++++++++++++++-
 1 file changed, 21 insertions(+), 1 deletion(-)

diff --git a/clusters/target-information.json b/clusters/target-information.json
index 7cd4d59..941779c 100644
--- a/clusters/target-information.json
+++ b/clusters/target-information.json
@@ -8118,7 +8118,27 @@
       },
       "uuid": "da228f94-4412-4226-9113-e19a55cd4aa5",
       "value": "Zimbabwe"
+    },
+    {
+      "meta": {
+        "capital": "El Aaiún",
+        "currency": "Sahrawi peseta",
+        "iso-code": [
+          "EH"
+        ],
+        "official-languages": [
+          "Arabic",
+          "Spanish"
+        ],
+        "synonyms": [
+          "Sahrawi Republic",
+          "Western Sahara"
+        ],
+        "top-level-domain": ".eh"
+      },
+      "uuid": "e21d3329-62f1-4ee3-8441-586d988a22e2",
+      "value": "Sahrawi Arab Democratic Republic"
     }
   ],
-  "version": 8
+  "version": 9
 }