diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index fb81e28..06d49c5 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -5890,7 +5890,8 @@
       "meta": {
         "refs": [
           "https://www.bleepingcomputer.com/news/security/british-airways-fell-victim-to-card-scraping-attack/",
-          "https://www.bleepingcomputer.com/news/security/feedify-hacked-with-magecart-information-stealing-script/"
+          "https://www.bleepingcomputer.com/news/security/feedify-hacked-with-magecart-information-stealing-script/",
+          "https://www.bleepingcomputer.com/news/security/magecart-group-compromises-plugin-used-in-thousands-of-stores-makes-rookie-mistake/"
         ]
       },
       "uuid": "0768fd50-c547-11e8-9aa5-776183769eab"