diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index ada0724..9c62dc1 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -5194,13 +5194,15 @@
           "https://www.fireeye.com/content/dam/fireeye-www/current-threats/pdfs/rpt-southeast-asia-threat-landscape.pdf",
           "https://www.secureworks.com/research/threat-profiles/bronze-fleetwood",
           "https://www.mandiant.com/resources/insights/apt-groups",
-          "https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RWMFIi"
+          "https://query.prod.cms.rt.microsoft.com/cms/api/am/binary/RWMFIi",
+          "http://internal-www.fireeye.com/blog/threat-research/2021/04/suspected-apt-actors-leverage-bypass-techniques-pulse-secure-zero-day.html"
         ],
         "synonyms": [
           "KEYHOLE PANDA",
           "MANGANESE",
           "BRONZE FLEETWOOD",
-          "TEMP.Bottle"
+          "TEMP.Bottle",
+          "Mulberry Typhoon"
         ],
         "targeted-sector": [
           "Electronic",