diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 9fd47e4..395f305 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -1037,7 +1037,8 @@
           "https://www.pwc.co.uk/cyber-security/pdf/pwc-cyber-threats-2020-a-year-in-retrospect.pdf",
           "https://www.fireeye.com/content/dam/fireeye-www/summit/cds-2019/presentations/cds19-executive-s08-achievement-unlocked.pdf",
           "https://www.proofpoint.com/us/blog/threat-insight/ta410-group-behind-lookback-attacks-against-us-utilities-sector-returns-new",
-          "https://www.crowdstrike.com/blog/two-birds-one-stone-panda/"
+          "https://www.crowdstrike.com/blog/two-birds-one-stone-panda/",
+          "http://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/cicada-apt10-china-ngo-government-attacks"
         ],
         "synonyms": [
           "STONE PANDA",
@@ -1052,7 +1053,8 @@
           "ATK41",
           "G0045",
           "Granite Taurus",
-          "TA429"
+          "TA429",
+          "Cicada"
         ]
       },
       "related": [