From d978998a5d22e6b788226508ddfc684959272864 Mon Sep 17 00:00:00 2001
From: Daniel Plohmann <daniel.plohmann@mailbox.org>
Date: Wed, 23 Aug 2023 14:02:15 +0200
Subject: [PATCH] RecordedFuture: RedHotel == EarthLusca

---
 clusters/threat-actor.json | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index e6ee977b..35923281 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -9967,7 +9967,8 @@
           "https://www.pwc.co.uk/issues/cyber-security-services/research/chasing-shadows.html",
           "https://www.crowdstrike.com/blog/overwatch-exposes-aquatic-panda-in-possession-of-log-4-shell-exploit-tools",
           "https://decoded.avast.io/luigicamastra/backdoored-client-from-mongolian-ca-monpass",
-          "https://www.pwc.com/gx/en/issues/cybersecurity/cyber-threat-intelligence/cyber-year-in-retrospect/yir-cyber-threats-report-download.pdf"
+          "https://www.pwc.com/gx/en/issues/cybersecurity/cyber-threat-intelligence/cyber-year-in-retrospect/yir-cyber-threats-report-download.pdf",
+          "https://go.recordedfuture.com/hubfs/reports/cta-2023-0808.pdf"
         ],
         "synonyms": [
           "CHROMIUM",
@@ -9976,7 +9977,8 @@
           "FISHMONGER",
           "BRONZE UNIVERSITY",
           "AQUATIC PANDA",
-          "Red Dev 10"
+          "Red Dev 10",
+          "RedHotel"
         ]
       },
       "related": [
@@ -11487,5 +11489,5 @@
       "value": "MoustachedBouncer"
     }
   ],
-  "version": 278
+  "version": 279
 }