diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index d265a2ee..b00906e2 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -465,7 +465,8 @@
           "POTASSIUM",
           "DustStorm",
           "Red Apollo",
-          "CVNX"
+          "CVNX",
+          "HOGFISH"
         ],
         "country": "CN",
         "refs": [