diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 37727b07..91f51395 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -417,7 +417,8 @@
           "https://www.fireeye.com/blog/threat-research/2015/12/the_eps_awakens.html",
           "https://www.cfr.org/interactive/cyber-operations/apt-16",
           "https://attack.mitre.org/groups/G0023",
-          "https://www.mandiant.com/resources/insights/apt-groups"
+          "https://www.mandiant.com/resources/insights/apt-groups",
+          "https://securelist.com/analysis/publications/74828/cve-2015-2545-overview-of-current-threats/"
         ],
         "synonyms": [
           "SVCMONDR",
@@ -4740,18 +4741,6 @@
       "uuid": "9035bfbf-a73f-4948-9df2-bd893e9cafef",
       "value": "EvilPost"
     },
-    {
-      "description": "The referenced link links this group to Temper Panda",
-      "meta": {
-        "attribution-confidence": "50",
-        "country": "CN",
-        "refs": [
-          "https://securelist.com/analysis/publications/74828/cve-2015-2545-overview-of-current-threats/"
-        ]
-      },
-      "uuid": "70b80bcc-58e3-4a09-a3bf-98c0412bb7d3",
-      "value": "SVCMONDR"
-    },
     {
       "meta": {
         "attribution-confidence": "50",