diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index c5a7b6d1..e089e9b6 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -9124,6 +9124,15 @@
       },
       "uuid": "0d72c57c-73e3-4739-8144-c8055cabd7dc",
       "value": "BladeHawk"
+    },
+    {
+      "description": "Cosmic Lynx is a Russia-based BEC cybercriminal organization that has significantly impacted the email threat landscape with sophisticated, high-dollar phishing attacks.",
+      "meta": {
+        "cfr-type-of-incident": "Business Email Compromise",
+        "refs": "https://www.agari.com/cyber-intelligence-research/whitepapers/acid-agari-cosmic-lynx.pdf"
+      },
+      "uuid": "",
+      "value": "Cosmic Lynx"
     }
   ],
   "version": 217