diff --git a/clusters/threat-actors.json b/clusters/threat-actors.json
index f01403f..9fe3af1 100644
--- a/clusters/threat-actors.json
+++ b/clusters/threat-actors.json
@@ -909,6 +909,10 @@
      {
        "value": "OilRig",
        "refs": ["http://researchcenter.paloaltonetworks.com/2016/05/the-oilrig-campaign-attacks-on-saudi-arabian-organizations-deliver-helminth-backdoor/"]
+     },
+     {
+       "value": "Volatile Cedar",
+       "refs": ["https://www.checkpoint.com/downloads/volatile-cedar-technical-report.pdf"]
      }
   ]
 }