diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 48fd6c6..c1bce44 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -6427,14 +6427,14 @@
           "https://www.secureworks.com/research/threat-profiles/gold-tahoe",
           "https://www.telekom.com/en/blog/group/article/eager-beaver-a-short-overview-of-the-restless-threat-actor-ta505-609546",
           "https://blog.fox-it.com/2020/11/16/ta505-a-brief-history-of-their-time/",
-          "https://www.secureworks.com/blog/how-cyber-adversaries-are-adapting-to-exploit-the-global-pandemic"
+          "https://www.secureworks.com/blog/how-cyber-adversaries-are-adapting-to-exploit-the-global-pandemic",
+          "https://cyberthreat.thalesgroup.com/attackers/ATK103"
         ],
         "synonyms": [
           "SectorJ04 Group",
           "GRACEFUL SPIDER",
           "GOLD TAHOE",
           "Dudear",
-          "TEMP.Warlock",
           "G0092",
           "ATK103"
         ]
@@ -8052,8 +8052,7 @@
         ],
         "synonyms": [
           "TEMP.Warlock",
-          "UNC902",
-          "GRACEFUL SPIDER"
+          "UNC902"
         ]
       },
       "uuid": "c01aadc6-1087-4e8e-8d5c-a27eba409fe3",