diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 0d8182a..ef66a01 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -2711,6 +2711,36 @@
         ]
       },
       "uuid": "1533bc1a-745a-11e8-90e3-efa3e975fef3s"
+    },
+    {
+      "value": "Iron Tiger",
+      "description": "This threat actor targets governments as well as technology, education, and telecommunications companies primarily in Asia and the United States, for the purpose of espionage.",
+      "meta": {
+        "refs": [
+          "https://www.cfr.org/interactive/cyber-operations/iron-tiger"
+        ],
+        "suspected victims": [
+          "United States",
+          "Japan",
+          "Taiwan",
+          "India",
+          "Canada",
+          "China",
+          "Thailand",
+          "Israel",
+          "Australia",
+          "Republic of Korea",
+          "Russia",
+          "Iran"
+        ],
+        "suspected state sponsor": "Unknown",
+        "type of incident": "Espionage",
+        "target category": [
+          "Government",
+          "Private sector"
+        ]
+      },
+      "uuid": "8e8e4ed8-7912-11e8-80be-671b4b5e7f92"
     }
   ],
   "name": "Threat actor",
@@ -2725,5 +2755,5 @@
   ],
   "description": "Known or estimated adversary groups targeting organizations and employees. Adversary groups are regularly confused with their initial operation or campaign.",
   "uuid": "7cdff317-a673-4474-84ec-4f1754947823",
-  "version": 43
+  "version": 44
 }