diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 05f9ddb..b73b84b 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -10613,7 +10613,25 @@
       ],
       "uuid": "a3c22f46-5135-4b39-a33f-92906ac12c31",
       "value": "TA866"
+    },
+    {
+      "description": "Since January 23, 2023, a threat actor identifying as \"Anonymous Sudan\" has been conducting denial of service (DDoS) attacks against multiple organizations in Sweden. This group claims to be \"hacktivists,\" politically motivated hackers from Sudan. According to Truesec’s report, the threat actor has nothing to do with the online activists collectively known as Anonymous.",
+      "meta": {
+        "cfr-suspected-victims": [
+          "Denmark",
+          "Sweden"
+        ],
+        "cfr-type-of-incident": [
+          "Denial of service"
+        ],
+        "references": [
+          "https://files.truesec.com/hubfs/Reports/Anonymous%20Sudan%20-%20Publish%201.2%20-%20a%20Truesec%20Report.pdf",
+          "https://www.truesec.com/hub/blog/what-is-anonymous-sudan"
+        ]
+      },
+      "uuid": "8ca38564-5515-45f5-9f3b-a4091546e10b",
+      "value": "Anonymous Sudan"
     }
   ],
-  "version": 262
+  "version": 263
 }