diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index e60ffa1..8450504 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -2665,7 +2665,8 @@
           "Operation Troy",
           "Operation GhostSecret",
           "Operation AppleJeus",
-          "APT38"
+          "APT38",
+          "Stardust Chollima"
         ]
       },
       "related": [