diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 579b407..e55f1d3 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -3081,7 +3081,8 @@
           "https://www.zdnet.com/article/north-korean-hackers-infiltrate-chiles-atm-network-after-skype-job-interview/",
           "https://blogs.jpcert.or.jp/en/2020/08/Lazarus-malware.html",
           "https://www.secureworks.com/research/threat-profiles/nickel-gladstone",
-          "https://blogs.jpcert.or.jp/en/2020/09/BLINDINGCAN.html"
+          "https://blogs.jpcert.or.jp/en/2020/09/BLINDINGCAN.html",
+          "https://www.welivesecurity.com/2020/11/16/lazarus-supply-chain-attack-south-korea/"
         ],
         "synonyms": [
           "Operation DarkSeoul",
@@ -8496,5 +8497,5 @@
       "value": "Operation Skeleton Key"
     }
   ],
-  "version": 188
+  "version": 189
 }