diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 25225c1e..e665a881 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -2696,8 +2696,7 @@
           "https://www.welivesecurity.com/2017/06/30/telebots-back-supply-chain-attacks-against-ukraine",
           "https://www.welivesecurity.com/2017/05/23/xdata-ransomware-making-rounds-amid-global-wannacryptor-scare",
           "https://www.welivesecurity.com/2017/06/27/new-ransomware-attack-hits-ukraine",
-          "https://www.welivesecurity.com/2017/10/24/bad-rabbit-not-petya-back",
-          "https://blog.trendmicro.com/trendlabs-security-intelligence/timeline-of-sandworm-attacks"
+          "https://www.welivesecurity.com/2017/10/24/bad-rabbit-not-petya-back"
         ],
         "synonyms": [
           "Quedagh",