diff --git a/elements/adversary-groups.json b/elements/adversary-groups.json
index 23217e7..09aac5a 100644
--- a/elements/adversary-groups.json
+++ b/elements/adversary-groups.json
@@ -850,7 +850,8 @@
     "group": "Dropping Elephant",
       "description": "Dropping Elephant (also known as “Chinastrats” and “Patchwork“) is a relatively new threat actor that is targeting a variety of high profile diplomatic and economic targets using a custom set of attack tools. Its victims are all involved with China’s foreign relations in some way, and are generally caught through spear-phishing or watering hole attacks.",
       "refs": [
-        "https://securelist.com/blog/research/75328/the-dropping-elephant-actor/"
+        "https://securelist.com/blog/research/75328/the-dropping-elephant-actor/",
+        "http://www.symantec.com/connect/blogs/patchwork-cyberespionage-group-expands-targets-governments-wide-range-industries"
       ],
       "synonyms": [
         "Chinastrats",