diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index d989a09..1f7f64b 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -4198,11 +4198,13 @@
           "https://github.com/StrangerealIntel/CyberThreatIntel/tree/master/Russia/APT/Gamaredon",
           "https://go.crowdstrike.com/rs/281-OBQ-266/images/Report2020CrowdStrikeGlobalThreatReport.pdf",
           "https://www.welivesecurity.com/2020/06/18/digging-up-invisimole-hidden-arsenal/",
-          "https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/shuckworm-gamaredon-espionage-ukraine"
+          "https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/shuckworm-gamaredon-espionage-ukraine",
+          "https://www.microsoft.com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/"
         ],
         "synonyms": [
           "Primitive Bear",
-          "Shuckworm"
+          "Shuckworm",
+          "ACTINIUM"
         ]
       },
       "related": [