diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index cd990c5..de791d9 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -12645,6 +12645,20 @@
       },
       "uuid": "34d1e532-3d47-44cb-b87c-7e9cbba2321e",
       "value": "IronHusky"
+    },
+    {
+      "description": "UserSec is a pro-Russian hacking group that has been active since at least 2022. The group is known for its DDoS attacks and has collaborated with other pro-Russian hacking groups. In May 2023, UserSec announced a cyber campaign targeting NATO member states and joined forces with KillNet to launch attacks against NATO.",
+      "meta": {
+        "country": "RU",
+        "refs": [
+          "https://therecord.media/scandinavian-airlines-cyberattack-anonymous-sudan/",
+          "https://blog.cyble.com/2023/05/24/notable-ddos-attack-tools-and-services-supporting-hacktivist-operations-in-2023/",
+          "https://socradar.io/cyber-shadows-pact-darknet-parliament-killnet-anonymous-sudan-revil/",
+          "https://socradar.io/dark-peep-2-war-and-a-piece-of-hilarity/"
+        ]
+      },
+      "uuid": "d0e1811e-53f9-48b5-b2ef-107e0f53239b",
+      "value": "UserSec"
     }
   ],
   "version": 292