diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index ec7f3cf6..3eb6dbf7 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -749,6 +749,7 @@
           "Group-4127",
           "STRONTIUM",
           "TAG_0700",
+          "Swallowtail",
           "IRON TWILIGHT"
         ],
         "country": "RU",