diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index c13287a..c01742b 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -17484,6 +17484,17 @@
       },
       "uuid": "e6afdfb4-a5ac-4be1-9cd0-c1801a7f7083",
       "value": "Storm-2077"
+    },
+    {
+      "description": "INDOHAXSEC TEAM is an Indonesian group that claims to have developed a web-based version of WannaCry, asserting the ability to encrypt websites and demand Bitcoin as ransom. However, their technical capabilities remain uncertain, as creating ransomware of this scale requires significant expertise. The group's claims may be exaggerated for attention, and verified evidence is needed to assess their true capabilities.",
+      "meta": {
+        "country": "ID",
+        "refs": [
+          "https://socradar.io/dark-peep-17-dark-web-hacker-forums-ransomware/"
+        ]
+      },
+      "uuid": "c4ff73cd-858a-4e84-b2cd-929532f8c320",
+      "value": "INDOHAXSEC TEAM"
     }
   ],
   "version": 321