diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index ebef9fb..999fc78 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -8455,7 +8455,7 @@
           "https://www.reddit.com/r/msp/comments/lwmo5c/mass_exploitation_of_onprem_exchange_servers",
           "https://blog.rapid7.com/2021/03/03/rapid7s-insightidr-enables-detection-and-response-to-microsoft-exchange-0-day",
           "https://twitter.com/ESETresearch/status/1366862946488451088",
-          "https://www.fireeye.com/blog/threat-research/2021/03/detection-response-to-exploitation-of-microsoft-exchange-zero-day-vulnerabilities.html,
+          "https://www.fireeye.com/blog/threat-research/2021/03/detection-response-to-exploitation-of-microsoft-exchange-zero-day-vulnerabilities.html",
           "https://us-cert.cisa.gov/ncas/alerts/aa21-062a",
           "https://discuss.elastic.co/t/detection-and-response-for-hafnium-activity/266289"
         ]