diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 4eaa1dd..f4b605e 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -8467,7 +8467,8 @@
           "https://www.cadosecurity.com/post/team-tnt-the-first-crypto-mining-worm-to-steal-aws-credentials",
           "https://www.intezer.com/blog/cloud-security/top-linux-cloud-threats-of-2020/",
           "https://www.trendmicro.com/en_us/research/20/l/teamtnt-now-deploying-ddos-capable-irc-bot-tntbotinger.html",
-          "https://cyware.com/news/hildegard-teamtnts-new-feature-rich-malware-targeting-kubernetes-6587eb45?utm_content=154419915&utm_medium=social&utm_source=twitter&hss_channel=tw-23713770"
+          "https://cyware.com/news/hildegard-teamtnts-new-feature-rich-malware-targeting-kubernetes-6587eb45",
+          "https://www.lacework.com/teamtnt-builds-botnet-from-chinese-cloud-servers/"
         ]
       },
       "uuid": "27de6a09-844b-4dcb-9ff9-7292aad826ba",