diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 2e63626e..45dfd3b9 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -2147,7 +2147,7 @@
         "country": "IR",
         "refs": [
           "https://www.secureworks.com/research/the-curious-case-of-mia-ash",
-          "\"https://www.cfr.org/interactive/cyber-operations/operation-cleaver",
+          "https://www.cfr.org/interactive/cyber-operations/operation-cleaver",
           "http://www.secureworks.com/cyber-threat-intelligence/threats/suspected-iran-based-hacker-group-creates-network-of-fake-linkedin-profiles/",
           "https://www.trendmicro.com/vinfo/us/security/news/cyber-attacks/operation-woolen-goldfish-when-kittens-go-phishing",
           "https://www.secureworks.com/blog/iranian-pupyrat-bites-middle-eastern-organizations",