diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 127815a..5c26c15 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -4108,11 +4108,13 @@
       "meta": {
         "refs": [
           "https://www.helpnetsecurity.com/2016/11/22/cobalt-hackers-synchronized-atm-heists/",
-          "https://www.bleepingcomputer.com/news/security/cobalt-hacking-group-tests-banks-in-russia-and-romania/"
+          "https://www.bleepingcomputer.com/news/security/cobalt-hacking-group-tests-banks-in-russia-and-romania/",
+          "https://www.secureworks.com/blog/cybercriminals-increasingly-trying-to-ensnare-the-big-financial-fish"
         ],
         "synonyms": [
           "Cobalt group",
-          "Cobalt gang"
+          "Cobalt gang",
+          "GOLD KINGSWOOD"
         ]
       },
       "uuid": "01967480-c49b-4d4a-a7fa-aef0eaf535fe",
@@ -6110,5 +6112,5 @@
       "value": "GC02"
     }
   ],
-  "version": 82
+  "version": 83
 }