diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 25b7ed29..2cc1f6a6 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -15932,6 +15932,16 @@
       },
       "uuid": "d6882fb9-d1e4-4cec-889c-5423c772d199",
       "value": "USDoD"
+    },
+    {
+      "description": "Water Orthrus is a threat actor known for distributing CopperStealer and CopperPhish malware. They target Microsoft 365 users with phishing campaigns to steal credit card information. The actor has evolved their malware to include rootkits for stealthy installations and has shifted their focus from personal information to cryptocurrency and credit card data. Water Orthrus has been linked to the Scranos campaign reported in 2019.",
+      "meta": {
+        "refs": [
+          "https://www.trendmicro.com/en_us/research/23/e/water-orthrus-new-campaigns-deliver-rootkit-and-phishing-modules.html"
+        ]
+      },
+      "uuid": "19ddf2b0-9cfb-430f-8919-49205cbec863",
+      "value": "Water Orthrus"
     }
   ],
   "version": 308