diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 5971b410..4ec9309d 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -4790,6 +4790,7 @@
           "https://www.secureworks.com/research/threat-profiles/bronze-butler"
         ],
         "synonyms": [
+          "Nian",
           "BRONZE BUTLER",
           "REDBALDKNIGHT",
           "STALKER PANDA"