diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 733c5f0..8863956 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -5813,7 +5813,8 @@
           "https://intrusiontruth.wordpress.com/2020/01/15/hainan-xiandun-technology-company-is-apt40",
           "https://www.secureworks.com/research/threat-profiles/bronze-mohawk",
           "https://www.mycert.org.my/portal/advisory?id=MA-774.022020",
-          "https://www.elastic.co/blog/advanced-techniques-used-in-malaysian-focused-apt-campaign"
+          "https://www.elastic.co/blog/advanced-techniques-used-in-malaysian-focused-apt-campaign",
+          "https://www.microsoft.com/security/blog/2020/09/24/gadolinium-detecting-empires-cloud/"
         ],
         "synonyms": [
           "TEMP.Periscope",
@@ -8388,5 +8389,5 @@
       "value": "Fox Kitten"
     }
   ],
-  "version": 180
+  "version": 181
 }