diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 4d5c81e..8fb89f8 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -2828,7 +2828,8 @@
           "https://blog.google/threat-analysis-group/fog-of-war-how-the-ukraine-conflict-transformed-the-cyber-threat-landscape/",
           "https://www.recordedfuture.com/russia-nexus-uac-0113-emulating-telecommunication-providers-in-ukraine",
           "https://cert.gov.ua/article/405538",
-          "https://cip.gov.ua/services/cm/api/attachment/download?id=60068"
+          "https://cip.gov.ua/services/cm/api/attachment/download?id=60068",
+          "https://packetstormsecurity.com/news/view/35790/Recent-OT-And-Espionage-Attacks-Linked-To-Russias-Sandworm-Now-Named-APT44.html"
         ],
         "synonyms": [
           "Quedagh",
@@ -2843,7 +2844,8 @@
           "FROZENBARENTS",
           "UAC-0113",
           "Seashell Blizzard",
-          "UAC-0082"
+          "UAC-0082",
+          "APT44"
         ],
         "targeted-sector": [
           "Electric",