diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 24955b8..63bc59e 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -7449,7 +7449,8 @@
           "https://www.pwc.com/gx/en/issues/cybersecurity/cyber-threat-intelligence/cyber-year-in-retrospect/yir-cyber-threats-report-download.pdf",
           "https://www.pwc.co.uk/cyber-security/pdf/pwc-cyber-threats-2020-a-year-in-retrospect.pdf",
           "https://www.fireeye.com/content/dam/fireeye-www/summit/cds-2019/presentations/cds19-executive-s08-achievement-unlocked.pdf",
-          "https://www.welivesecurity.com/2021/03/10/exchange-servers-under-siege-10-apt-groups/"
+          "https://www.welivesecurity.com/2021/03/10/exchange-servers-under-siege-10-apt-groups/",
+          "https://services.google.com/fh/files/blogs/gcat_threathorizons_full_apr2023.pdf"
         ],
         "synonyms": [
           "G0096",
@@ -7465,7 +7466,8 @@
           "Red Kelpie",
           "G0044",
           "Earth Baku",
-          "Amoeba"
+          "Amoeba",
+          "HOODOO"
         ]
       },
       "related": [