diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 2aab5fe..01ecbff 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -6661,6 +6661,8 @@
       "meta": {
         "refs": [
           "https://mkd-cirt.mk/wp-content/uploads/2018/08/20181009_3_1_M-Trends2018-May-2018-compressed.pdf"
+          "https://nciipc.gov.in/documents/NCIIPC_Newsletter_July18.pdf"
+          "https://aisa.org.au//PDF/AISA%20Sydney%20-%20Dec2016.pdf"
         ],
         "synonyms": [
           "APT 36",