diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index b48f6896..1d7e6222 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -1376,7 +1376,7 @@
     },
     {
       "meta": {
-        "country": "LBY"
+        "country": "LY"
       },
       "description": "Libyan Scorpions is a malware operation in use since September 2015 and operated by a politically motivated group whose main objective is intelligence gathering, spying on influentials and political figures and operate an espionage campaign within Libya.",
       "value": "Libyan Scorpions"