From c3e604762240832d395ed153532b0b1b0970f090 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Mon, 19 Sep 2016 16:41:58 +0200
Subject: [PATCH] TA530 added

---
 elements/adversary-groups.json | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/elements/adversary-groups.json b/elements/adversary-groups.json
index 50c53e21..ca1542ae 100644
--- a/elements/adversary-groups.json
+++ b/elements/adversary-groups.json
@@ -925,6 +925,11 @@
      {
        "value": "APT30",
        "refs": ["https://www2.fireeye.com/rs/fireye/images/rpt-apt30.pdf"]
+     },
+     {
+       "value": "TA530",
+       "refs": ["https://www.proofpoint.com/us/threat-insight/post/malicious-macros-add-to-sandbox-evasion-techniques-to-distribute-new-dridex"],
+       "description": "TA530, who we previously examined in relation to large-scale personalized phishing campaigns "
      }
   ]
 }