diff --git a/elements/adversary-groups.json b/elements/adversary-groups.json
index 259542ac..02c80ff1 100644
--- a/elements/adversary-groups.json
+++ b/elements/adversary-groups.json
@@ -219,7 +219,7 @@
                         "group": "TeamSpy Crew",
                         "refs": ["https://securelist.com/blog/incidents/35520/the-teamspy-crew-attacks-abusing-teamviewer-for-cyberespionage-8/"],
                         "country": "RU",
-                        "synonyms": ["TeamSpy"]
+                        "synonyms": ["TeamSpy","Team Bear"]
                         },
                         {
                         "group": "BuhTrap",