diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index b72f522..f7f5b28 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -2017,10 +2017,12 @@
         "attribution-confidence": "50",
         "country": "IR",
         "refs": [
-          "http://www.scmagazineuk.com/iran-and-russia-blamed-for-state-sponsored-espionage/article/330401/"
+          "http://www.scmagazineuk.com/iran-and-russia-blamed-for-state-sponsored-espionage/article/330401/",
+          "https://carnegieendowment.org/2018/01/04/iran-s-cyber-ecosystem-who-are-threat-actors-pub-75140"
         ],
         "synonyms": [
-          "Group 42"
+          "Group 42",
+          "VOYEUR"
         ]
       },
       "uuid": "2e77511d-f72f-409e-9b64-e2a15efe9bf4",