diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 132419f..32ce193 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -4862,6 +4862,7 @@
           "https://www.recordedfuture.com/research/bluecharlie-previously-tracked-as-tag-53-continues-to-deploy-new-infrastructure-in-2023",
           "https://www.microsoft.com/en-us/security/blog/2023/12/07/star-blizzard-increases-sophistication-and-evasion-in-ongoing-attacks/",
           "https://go.recordedfuture.com/hubfs/reports/cta-2022-1205.pdf",
+          "https://www.pwc.com/gx/en/issues/cybersecurity/cyber-threat-intelligence/blue-callisto-orbits-around-us.html",
           "https://www.ncsc.gov.uk/files/Advisory-Russian-FSB-cyber-actor-star-blizzard-continues-worldwide-spear-sphishing-campaigns.pdf",
           "https://www.gov.uk/government/news/uk-exposes-attempted-russian-cyber-interference-in-politics-and-democratic-processes",
           "https://cloud.google.com/blog/topics/threat-intelligence/cyber-threats-global-elections",
@@ -4869,6 +4870,7 @@
           "https://blog.google/threat-analysis-group/google-tag-coldriver-russian-phishing-malware",
           "https://citizenlab.ca/2024/08/sophisticated-phishing-targets-russias-perceived-enemies-around-the-globe/",
           "https://www.gov.uk/government/news/uk-exposes-attempted-russian-cyber-interference-in-politics-and-democratic-processes",
+          "https://www.pwc.com/gx/en/issues/cybersecurity/cyber-threat-intelligence/coldwastrel-space.html",
           "https://citizenlab.ca/2024/10/disrupting-coldriver/",
           "https://blogs.microsoft.com/on-the-issues/2024/10/03/protecting-democratic-institutions-from-cyber-threats/",
           "https://www.justice.gov/opa/pr/justice-department-disrupts-russian-intelligence-spear-phishing-efforts",