diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index dc55034..c0d9975 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -2564,7 +2564,8 @@
           "https://www.zdnet.com/article/this-hacking-gang-just-updated-the-malware-it-uses-against-uk-targets/",
           "https://attack.mitre.org/groups/G0010/",
           "https://www.telsy.com/turla-venomous-bear-updates-its-arsenal-newpass-appears-on-the-apt-threat-scene/",
-          "https://www.secureworks.com/research/threat-profiles/iron-hunter"
+          "https://www.secureworks.com/research/threat-profiles/iron-hunter",
+          "https://www.welivesecurity.com/2020/12/02/turla-crutch-keeping-back-door-open/"
         ],
         "synonyms": [
           "Turla",
@@ -8500,5 +8501,5 @@
       "value": "Operation Skeleton Key"
     }
   ],
-  "version": 192
+  "version": 193
 }