diff --git a/clusters/rat.json b/clusters/rat.json
index 8c4d33d..5ae1e48 100644
--- a/clusters/rat.json
+++ b/clusters/rat.json
@@ -2543,7 +2543,8 @@
         "refs": [
           "https://researchcenter.paloaltonetworks.com/2017/04/unit42-cardinal-rat-active-two-years/",
           "https://www.scmagazine.com/cardinal-rats-unique-downloader-allowed-it-to-avoid-detection-for-years/article/651927/",
-          "https://www.cyber.nj.gov/threat-profiles/trojan-variants/cardinal"
+          "https://www.cyber.nj.gov/threat-profiles/trojan-variants/cardinal",
+          "https://unit42.paloaltonetworks.com/cardinal-rat-sins-again-targets-israeli-fin-tech-firms/"
         ]
       },
       "uuid": "cb23f563-a8b9-4427-9884-594e8d3cc836",