diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 1ea5e190..f8a872cf 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -6378,7 +6378,11 @@
       "meta": {
         "refs": [
           "https://www.crowdstrike.com/blog/big-game-hunting-with-ryuk-another-lucrative-targeted-ransomware/",
-          "https://www.crowdstrike.com/blog/meet-crowdstrikes-adversary-of-the-month-for-february-mummy-spider/"
+          "https://www.crowdstrike.com/blog/meet-crowdstrikes-adversary-of-the-month-for-february-mummy-spider/",
+          "https://www.proofpoint.com/us/threat-insight/post/threat-actor-profile-ta542-banker-malware-distribution-service"
+        ],
+        "synonyms": [
+          "TA542"
         ]
       },
       "uuid": "c93281be-f6cd-4cd0-a5a3-defde9d77d8b",