diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 42d990c..b486d1a 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -7426,6 +7426,8 @@
           "https://duo.com/decipher/apt-groups-moving-down-the-supply-chain",
           "https://redalert.nshc.net/2019/12/03/threat-actor-targeting-hong-kong-activists",
           "https://twitter.com/bkMSFT/status/1201876664667582466",
+          "https://www.secureworks.com/research/bronz-vinewood-uses-hanaloader-to-target-government-supply-chain",
+          "https://www.secureworks.com/research/bronze-vinewood-targets-supply-chains",
           "https://www.secureworks.com/research/threat-profiles/bronze-vinewood"
         ],
         "synonyms": [
@@ -8353,5 +8355,5 @@
       "value": "GALLIUM"
     }
   ],
-  "version": 166
+  "version": 167
 }