diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index d989a09..e5f43f6 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -4198,11 +4198,14 @@
           "https://github.com/StrangerealIntel/CyberThreatIntel/tree/master/Russia/APT/Gamaredon",
           "https://go.crowdstrike.com/rs/281-OBQ-266/images/Report2020CrowdStrikeGlobalThreatReport.pdf",
           "https://www.welivesecurity.com/2020/06/18/digging-up-invisimole-hidden-arsenal/",
-          "https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/shuckworm-gamaredon-espionage-ukraine"
+          "https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/shuckworm-gamaredon-espionage-ukraine",
+          "https://www.microsoft.com/security/blog/2022/02/04/actinium-targets-ukrainian-organizations/",
+          "https://www.welivesecurity.com/2020/06/11/gamaredon-group-grows-its-game/"
         ],
         "synonyms": [
           "Primitive Bear",
-          "Shuckworm"
+          "Shuckworm",
+          "ACTINIUM"
         ]
       },
       "related": [
@@ -8940,5 +8943,5 @@
       "value": "Antlion"
     }
   ],
-  "version": 211
+  "version": 212
 }