From c39b46e9d5d3252e02fa265ef37524926c7f8d09 Mon Sep 17 00:00:00 2001
From: Daniel Plohmann <daniel.plohmann@mailbox.org>
Date: Wed, 15 Mar 2023 14:55:25 +0100
Subject: [PATCH] Update threat-actor.json

when value "Sofacy" was changed to "APT28", it seems Sofacy was not added to aliases, so it's missing right now.
---
 clusters/threat-actor.json | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index d9d8c962..05f9ddb3 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -2185,7 +2185,8 @@
           "T-APT-12",
           "APT-C-20",
           "UAC-0028",
-          "FROZENLAKE"
+          "FROZENLAKE",
+          "Sofacy"
         ]
       },
       "related": [