From e1905909c591e0ddd154b5e790132c8cdf54f37a Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Sat, 24 Sep 2016 10:15:54 +0200
Subject: [PATCH] Libyan Scorpions added

---
 elements/adversary-groups.json | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/elements/adversary-groups.json b/elements/adversary-groups.json
index b170344..050079c 100644
--- a/elements/adversary-groups.json
+++ b/elements/adversary-groups.json
@@ -93,7 +93,8 @@
     "Poseidon Group",
     "DragonOK",
     "Threat Group-3390",
-    "Project Sauron"
+    "Project Sauron",
+    "Libyan Scorpions"
   ],
   "values": [
     {
@@ -951,6 +952,11 @@
        "value": "FIN6",
        "description": "FIN is a group targeting financial assets including assets able to do financial transaction including PoS.",
        "refs": ["https://www2.fireeye.com/rs/848-DID-242/images/rpt-fin6.pdf"]
+     },
+     {
+       "value": "Libyan Scorpions",
+       "description": "Libyan Scorpions is a malware operation in use since September 2015 and operated by a politically motivated group whose main objective is intelligence gathering, spying on influentials and political figures and operate an espionage campaign within Libya.",
+       "country": "LBY"
      }
   ]
 }