diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 31002e9..0e53203 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -642,7 +642,8 @@
           "https://www.secureworks.com/research/threat-profiles/bronze-atlas",
           "https://www.secureworks.com/research/threat-profiles/bronze-export",
           "https://www.pwc.co.uk/cyber-security/assets/cyber-threats-2019-retrospect.pdf",
-          "https://www.justice.gov/opa/pr/seven-international-cyber-defendants-including-apt41-actors-charged-connection-computer"
+          "https://www.justice.gov/opa/pr/seven-international-cyber-defendants-including-apt41-actors-charged-connection-computer",
+          "https://assets.documentcloud.org/documents/7210602/FLASH-AC-000133-TT-Published.pdf"
         ],
         "synonyms": [
           "Winnti Umbrella",