diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index b45dae3a..2d6d1db7 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -12734,6 +12734,18 @@
       },
       "uuid": "e89ebfcb-e7a3-4b2d-b0d7-399bb4904e27",
       "value": "Desorden Group"
+    },
+    {
+      "description": "Confucius is an APT organization funded by India. It has been carrying out cyber attacks since 2013. Its main targets are India's neighbouring countries such as Pakistan and China. It has a strong interest in targets in the fields of military, government and energy.",
+      "meta": {
+        "country": "IN",
+        "refs": [
+          "https://medium.com/@knownsec404team/apt-k-47-mysterious-elephant-a-new-apt-organization-in-south-asia-5c66f954477",
+          "https://blog.nsfocus.net/aptconfuciuspakistanibo/"
+        ]
+      },
+      "uuid": "54618130-55d3-4506-b62b-67f2dca12b04",
+      "value": "Confucious"
     }
   ],
   "version": 293