diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index c929748..24955b8 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -6075,14 +6075,16 @@
           "https://www.darkreading.com/threat-intelligence/chinese-apt-bronze-president-spy-campaign-russian-military",
           "https://www.pwc.co.uk/cyber-security/assets/cyber-threats-2019-retrospect.pdf",
           "https://www.pwc.co.uk/cyber-security/pdf/pwc-cyber-threats-2020-a-year-in-retrospect.pdf",
-          "https://services.google.com/fh/files/blogs/google_fog_of_war_research_report.pdf"
+          "https://services.google.com/fh/files/blogs/google_fog_of_war_research_report.pdf",
+          "https://www.trendmicro.com/en_us/research/22/k/earth-preta-spear-phishing-governments-worldwide.html"
         ],
         "synonyms": [
           "BRONZE PRESIDENT",
           "HoneyMyte",
           "Red Lich",
           "TEMP.HEX",
-          "BASIN"
+          "BASIN",
+          "Earth Preta"
         ]
       },
       "uuid": "78bf726c-a9e6-11e8-9e43-77249a2f7339",