diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 71a1731..b63bcf6 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -8954,13 +8954,15 @@
           "https://blog.malwarebytes.com/threat-intelligence/2022/04/new-uac-0056-activity-theres-a-go-elephant-in-the-room/",
           "https://www.intezer.com/blog/research/elephant-malware-targeting-ukrainian-orgs/",
           "https://www.sentinelone.com/blog/threat-actor-uac-0056-targeting-ukraine-with-fake-translation-software/",
-          "https://unit42.paloaltonetworks.com/atoms/nascentursa/"
+          "https://unit42.paloaltonetworks.com/atoms/nascentursa/",
+          "https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/nodaria-ukraine-infostealer"
         ],
         "synonyms": [
           "UNC2589",
           "TA471",
           "UAC-0056",
-          "Nascent Ursa"
+          "Nascent Ursa",
+          "Nodaria"
         ]
       },
       "uuid": "c67d3dfb-ab39-46e1-a971-5efdfe6a5b9f",