From 4fee985b5edd1e3fecf39919cd1119dca6fba504 Mon Sep 17 00:00:00 2001
From: StefanKelm <StefanKelm@users.noreply.github.com>
Date: Thu, 3 Dec 2020 13:05:14 +0100
Subject: [PATCH] Update threat-actor.json

Turla
---
 clusters/threat-actor.json | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index dc550344..c0d99757 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -2564,7 +2564,8 @@
           "https://www.zdnet.com/article/this-hacking-gang-just-updated-the-malware-it-uses-against-uk-targets/",
           "https://attack.mitre.org/groups/G0010/",
           "https://www.telsy.com/turla-venomous-bear-updates-its-arsenal-newpass-appears-on-the-apt-threat-scene/",
-          "https://www.secureworks.com/research/threat-profiles/iron-hunter"
+          "https://www.secureworks.com/research/threat-profiles/iron-hunter",
+          "https://www.welivesecurity.com/2020/12/02/turla-crutch-keeping-back-door-open/"
         ],
         "synonyms": [
           "Turla",
@@ -8500,5 +8501,5 @@
       "value": "Operation Skeleton Key"
     }
   ],
-  "version": 192
+  "version": 193
 }