From bef5f03015e47fd2bef8a38e98e5e9a1385cc76f Mon Sep 17 00:00:00 2001
From: Liam Sennitt <liam.sennitt@gmail.com>
Date: Sat, 2 Mar 2019 09:01:00 +0000
Subject: [PATCH] fix tagging in turla png dropper service rule

---
 rules/apt/apt_turla_service_png.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/rules/apt/apt_turla_service_png.yml b/rules/apt/apt_turla_service_png.yml
index 0a6735f21..2c95c6cd8 100644
--- a/rules/apt/apt_turla_service_png.yml
+++ b/rules/apt/apt_turla_service_png.yml
@@ -5,9 +5,9 @@ references:
 author: Florian Roth
 date: 2018/11/23
 tags:
-    - attack.command_and_control
-    - attack.g0016
-    - attack.t1172
+    - attack.persistence
+    - attack.g0010
+    - attack.t1050
 logsource:
     product: windows
     service: system