diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 3b0c82d..b55b01a 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -12416,6 +12416,20 @@
       },
       "uuid": "79e826b0-b051-4a61-b38c-496021b3afdb",
       "value": "IndigoZebra"
+    },
+    {
+      "description": "GhostSec is a hacktivist group that emerged as an offshoot of Anonymous. They primarily focused on counterterrorism efforts and monitoring online activities associated with terrorism. They gained prominence following the 2015 Charlie Hebdo shooting in Paris and the rise of ISIS.",
+      "meta": {
+        "aliases": [
+          "Ghost Security"
+        ],
+        "refs": [
+          "https://www.uptycs.com/blog/ghostlocker-ransomware-ghostsec",
+          "https://forescoutstage.wpengine.com/blog/the-increasing-threat-posed-by-hacktivist-attacks-an-analysis-of-targeted-organizations-devices-and-ttps/"
+        ]
+      },
+      "uuid": "a1315451-326f-4185-8d71-80f9243f395f",
+      "value": "GhostSec"
     }
   ],
   "version": 289