diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 63bc59e4..31fc78cd 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -841,7 +841,8 @@
           "https://unit42.paloaltonetworks.com/atoms/iron-taurus/",
           "https://www.mandiant.com/resources/insights/apt-groups",
           "https://www.pwc.co.uk/cyber-security/pdf/pwc-cyber-threats-2020-a-year-in-retrospect.pdf",
-          "https://www.welivesecurity.com/2021/03/10/exchange-servers-under-siege-10-apt-groups/"
+          "https://www.welivesecurity.com/2021/03/10/exchange-servers-under-siege-10-apt-groups/",
+          "https://www.trendmicro.com/en_us/research/21/d/iron-tiger-apt-updates-toolkit-with-evolved-sysupdate-malware-va.html"
         ],
         "synonyms": [
           "GreedyTaotie",
@@ -856,7 +857,8 @@
           "BRONZE UNION",
           "Lucky Mouse",
           "G0027",
-          "Iron Taurus"
+          "Iron Taurus",
+          "Earth Smilodon"
         ]
       },
       "related": [