diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 69cea13..2362d96 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -5876,7 +5876,8 @@
       "meta": {
         "refs": [
           "https://www.recordedfuture.com/chinese-cyberespionage-operations",
-          "https://go.recordedfuture.com/hubfs/reports/cta-2018-0626.pdf"
+          "https://go.recordedfuture.com/hubfs/reports/cta-2018-0626.pdf",
+          "https://go.recordedfuture.com/hubfs/reports/ta-2022-0816.pdf"
         ],
         "synonyms": [
           "DeepCliff",