diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 0f903ce..fee4abb 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -7866,7 +7866,8 @@
           "https://s.tencent.com/research/report/659.html",
           "https://www.fireeye.com/content/dam/fireeye-www/global/en/current-threats/pdfs/fireeye-sidewinder-targeted-attack.pdf",
           "https://s.tencent.com/research/report/479.html",
-          "https://medium.com/@Sebdraven/apt-sidewinder-tricks-powershell-anti-forensics-and-execution-side-loading-5bc1a7e7c84c"
+          "https://medium.com/@Sebdraven/apt-sidewinder-tricks-powershell-anti-forensics-and-execution-side-loading-5bc1a7e7c84c",
+          "https://mp.weixin.qq.com/s/8j_rHA7gdMxY1_X8alj8Zg"
         ],
         "synonyms": [
           "RAZOR TIGER",
@@ -9064,7 +9065,8 @@
       "meta": {
         "country": "IN",
         "refs": [
-          "https://www.bitdefender.com/files/News/CaseStudies/study/352/Bitdefender-PR-Whitepaper-BitterAPT-creat4571-en-EN-GenericUse.pdf"
+          "https://www.bitdefender.com/files/News/CaseStudies/study/352/Bitdefender-PR-Whitepaper-BitterAPT-creat4571-en-EN-GenericUse.pdf",
+          "https://mp.weixin.qq.com/s/8j_rHA7gdMxY1_X8alj8Zg"
         ],
         "synonyms": [
           "Bitter",