diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index e1f9d81..24ba9df 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -6,6 +6,7 @@
           "Comment Panda",
           "PLA Unit 61398",
           "APT 1",
+          "APT1",
           "Advanced Persistent Threat 1",
           "Byzantine Candor",
           "Group 3",
@@ -375,7 +376,9 @@
           "menuPass",
           "happyyongzi",
           "POTASSIUM",
-          "DustStorm"
+          "DustStorm",
+          "Red Apollo",
+          "CVNX"
         ],
         "country": "CN",
         "refs": [