diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index be98f19..08f0f9f 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -341,7 +341,8 @@
           "TEMP.Hippo",
           "Group 35",
           "HIPPOTeam",
-          "APT27"
+          "APT27",
+          "Operation Iron Tiger"
         ],
         "country": "CN",
         "refs": [
@@ -1225,5 +1226,5 @@
   ],
   "description": "Known or estimated adversary groups targeting organizations and employees. Adversary groups are regularly confused with their initial operation or campaign.",
   "uuid": "7cdff317-a673-4474-84ec-4f1754947823",
-  "version": 5
+  "version": 6
 }