diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 2492f2e..557732d 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -6207,7 +6207,8 @@
           "https://www.zdnet.com/article/new-leaks-of-iranian-cyber-espionage-operations-hit-telegram-and-the-dark-web/",
           "https://attack.mitre.org/groups/G0069/",
           "http://www.secureworks.com/research/threat-profiles/cobalt-ulster",
-          "https://unit42.paloaltonetworks.com/atoms/boggyserpens/"
+          "https://unit42.paloaltonetworks.com/atoms/boggyserpens/",
+          "https://www.sentinelone.com/blog/the-new-frontline-of-geopolitics-understanding-the-rise-of-state-sponsored-cyber-attacks/"
         ],
         "synonyms": [
           "TEMP.Zagros",
@@ -6218,7 +6219,8 @@
           "G0069",
           "ATK51",
           "Boggy Serpens",
-          "Mango Sandstorm"
+          "Mango Sandstorm",
+          "TA450"
         ]
       },
       "related": [