diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index c7d03b7..3dd6952 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -720,7 +720,6 @@
           "TG-4127",
           "Group-4127",
           "STRONTIUM",
-          "Grey-Cloud",
           "TAG_0700"
         ],
         "country": "RU",
@@ -1229,16 +1228,12 @@
     {
       "meta": {
         "synonyms": [
-          "Grey-Pro",
-          "Coldriver",
           "Reuse team",
-          "Malware reusers",
-          "Callisto Group",
           "Dancing Salome"
         ]
       },
       "description": "Threat Group conducting cyber espionage while re-using tools from other teams; like those of Hacking Team, and vmprotect to obfuscate.",
-      "value": "Callisto"
+      "value": "Malware reusers"
     },
     {
       "value": "TERBIUM",