diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index de524a3..d3b7b07 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -11078,7 +11078,11 @@
       "description": "Hezb is a group deploying cryptominers when new exploit are available for public facing vulnerabilities. The name is after the miner process they deploy.",
       "meta": {
         "refs": [
-          "https://www.pwndefend.com/2022/06/04/cve-2022-26134-honeypot-payload-analysis-example/"
+          "https://www.pwndefend.com/2022/06/04/cve-2022-26134-honeypot-payload-analysis-example/",
+          "https://asec.ahnlab.com/en/60440/"
+        ],
+        "synonyms": [
+          "Mimo"
         ]
       },
       "uuid": "fd82cd40-9306-4285-8fae-ad29a9711603",