diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 820c620..5416249 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -10643,7 +10643,12 @@
           "https://documents.trendmicro.com/assets/txt/earth-berberoka-macos-iocs-2.txt",
           "https://documents.trendmicro.com/assets/txt/earth-berberoka-domains-2.txt",
           "https://www.youtube.com/watch?v=QXGO4RJaUPQ",
-          "https://www.botconf.eu/wp-content/uploads/2022/05/Botconf2022-40-LunghiHorejsi.pdf"
+          "https://www.botconf.eu/wp-content/uploads/2022/05/Botconf2022-40-LunghiHorejsi.pdf",
+          "https://securelist.com/diceyf-deploys-gameplayerframework-in-online-casino-development-studio/107723/",
+          "https://www.trendmicro.com/en_us/research/22/h/irontiger-compromises-chat-app-Mimi-targets-windows-mac-linux-users.html"
+        ],
+        "synonyms": [
+          "GamblingPuppet"
         ]
       },
       "uuid": "9d82077b-7e95-4b22-8762-3224797ff5f0",