diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index c51341d..ab881e1 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -10461,7 +10461,11 @@
         "cfr-type-of-incident": "Espionage",
         "country": "LB",
         "refs": [
-          "https://www.microsoft.com/security/blog/2022/06/02/exposing-polonium-activity-and-infrastructure-targeting-israeli-organizations/"
+          "https://www.microsoft.com/security/blog/2022/06/02/exposing-polonium-activity-and-infrastructure-targeting-israeli-organizations/",
+          "https://www.deepinstinct.com/blog/polonium-apt-group-uncovering-new-elements"
+        ],
+        "synonyms": [
+          "Plaid Rain"
         ]
       },
       "related": [