From f042f98247f00afadffc5f1b2fd0fc250b9ddd45 Mon Sep 17 00:00:00 2001
From: StefanKelm <StefanKelm@users.noreply.github.com>
Date: Mon, 8 Jun 2020 14:09:39 +0200
Subject: [PATCH] Update threat-actor.json

Higaisa
---
 clusters/threat-actor.json | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 572c9cf..a42411e 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -8304,7 +8304,8 @@
         ],
         "country": "KR",
         "refs": [
-          "https://s.tencent.com/research/report/836.html"
+          "https://s.tencent.com/research/report/836.html",
+          "https://blog.malwarebytes.com/threat-analysis/2020/06/higaisa/"
         ]
       },
       "uuid": "a9df6cb7-74ff-482f-b23b-ac40e975a31a",
@@ -8341,5 +8342,5 @@
       "value": "COBALT KATANA"
     }
   ],
-  "version": 162
+  "version": 163
 }