diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 892a58e..5178c5d 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -4200,7 +4200,8 @@
           "https://www.welivesecurity.com/2020/06/18/digging-up-invisimole-hidden-arsenal/"
         ],
         "synonyms": [
-          "Primitive Bear"
+          "Primitive Bear",
+          "Shuckworm"
         ]
       },
       "related": [