diff --git a/elements/adversary-groups.json b/elements/adversary-groups.json
index d965092..b1201c4 100644
--- a/elements/adversary-groups.json
+++ b/elements/adversary-groups.json
@@ -435,6 +435,16 @@
       "description": "An established group of cyber attackers based in Iran, who carried on several campaigns in 2013, including a series of attacks targeting political dissidents and those supporting Iranian political opposition.",
       "group": "Magic Kitten"
     },
+    {
+      "country": "IR",
+      "synonyms": [
+        "Operation Cleaver"
+      ],
+      "refs": [
+        "http://cdn2.hubspot.net/hubfs/270968/assets/Cleaver/Cylance_Operation_Cleaver_Report.pdf"
+      ],
+      "group": "Cleaver"
+    },
     {
       "country": "TN",
       "synonyms": [
@@ -613,7 +623,6 @@
         "Animal Farm"
       ]
     },
-
     {
       "synonyms": [
         "SyrianElectronicArmy",