diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 2ebfc5f..fe5bb1a 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -12487,7 +12487,21 @@
       },
       "uuid": "d5908276-068a-4a4f-a60d-ab5800173ccd",
       "value": "Storm-1133"
+    },
+    {
+      "description": "TA499, also known as Vovan and Lexus, is a Russia-aligned threat actor that has aggressively engaged in email campaigns since at least 2021.  The threat actor’s campaigns attempt to convince high-profile North American and European government officials as well as CEOs of prominent companies and celebrities into participating in recorded phone calls or video chats.",
+      "meta": {
+        "refs": [
+          "https://www.proofpoint.com/us/blog/threat-insight/dont-answer-russia-aligned-ta499-beleaguers-targets-video-call-requests"
+        ],
+        "synonyms": [
+          "Vovan",
+          "Lexus"
+        ]
+      },
+      "uuid": "0e9bbcf1-9273-4438-b437-287317bfb989",
+      "value": "TA499"
     }
   ],
-  "version": 290
+  "version": 291
 }