diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 764b703..f5a4b96 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -1036,10 +1036,11 @@
           "https://www.mandiant.com/resources/insights/apt-groups",
           "https://www.pwc.co.uk/cyber-security/pdf/pwc-cyber-threats-2020-a-year-in-retrospect.pdf",
           "https://www.fireeye.com/content/dam/fireeye-www/summit/cds-2019/presentations/cds19-executive-s08-achievement-unlocked.pdf",
-          "https://www.proofpoint.com/us/blog/threat-insight/ta410-group-behind-lookback-attacks-against-us-utilities-sector-returns-new"
+          "https://www.proofpoint.com/us/blog/threat-insight/ta410-group-behind-lookback-attacks-against-us-utilities-sector-returns-new",
+          "https://www.crowdstrike.com/blog/two-birds-one-stone-panda/"
         ],
         "synonyms": [
-          "STONE PANDAD",
+          "STONE PANDA",
           "Menupass Team",
           "happyyongzi",
           "POTASSIUM",