From eea0f528fa159ffa55348f8dcf52d95525aa8f83 Mon Sep 17 00:00:00 2001
From: Alexandre Dulaunoy <a@foo.be>
Date: Tue, 12 Nov 2019 12:51:44 +0100
Subject: [PATCH] chg: [threat-actor] Lucky Mouse synonym added

Ref: https://www.bleepingcomputer.com/news/security/cyber-espionage-group-customizes-old-public-tools/
Ref: https://www.cybersecurity-insiders.com/apt-lucky-mouse-group-targets-canada-icao-via-cyber-attack/
---
 clusters/threat-actor.json | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 30ce5af2..10ea810a 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -1060,7 +1060,8 @@
           "APT27",
           "Operation Iron Tiger",
           "Iron Tiger APT",
-          "BRONZE UNION"
+          "BRONZE UNION",
+          "Lucky Mouse"
         ]
       },
       "related": [
@@ -7794,5 +7795,5 @@
       "value": "Calypso group"
     }
   ],
-  "version": 140
+  "version": 141
 }