diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index e0dc474..579b407 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -4479,7 +4479,8 @@
           "https://github.com/eset/malware-research/tree/master/oceanlotus",
           "https://www.cfr.org/interactive/cyber-operations/ocean-lotus",
           "https://www.accenture.com/us-en/blogs/blogs-pond-loach-delivers-badcake-malware",
-          "https://www.secureworks.com/research/threat-profiles/tin-woodlawn"
+          "https://www.secureworks.com/research/threat-profiles/tin-woodlawn",
+          "https://www.volexity.com/blog/2020/11/06/oceanlotus-extending-cyber-espionage-operations-through-fake-websites/"
         ],
         "synonyms": [
           "OceanLotus Group",
@@ -8495,5 +8496,5 @@
       "value": "Operation Skeleton Key"
     }
   ],
-  "version": 187
+  "version": 188
 }