diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 572c9cf..a42411e 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -8304,7 +8304,8 @@
         ],
         "country": "KR",
         "refs": [
-          "https://s.tencent.com/research/report/836.html"
+          "https://s.tencent.com/research/report/836.html",
+          "https://blog.malwarebytes.com/threat-analysis/2020/06/higaisa/"
         ]
       },
       "uuid": "a9df6cb7-74ff-482f-b23b-ac40e975a31a",
@@ -8341,5 +8342,5 @@
       "value": "COBALT KATANA"
     }
   ],
-  "version": 162
+  "version": 163
 }