diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 10baf5a..de5e1c9 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -12100,7 +12100,11 @@
           "Energy"
         ],
         "refs": [
-          "https://www.ptsecurity.com/ww-en/analytics/pt-esc-threat-intelligence/new-apt-group-chamelgang/"
+          "https://www.ptsecurity.com/ww-en/analytics/pt-esc-threat-intelligence/new-apt-group-chamelgang/",
+          "https://www.sentinelone.com/labs/chamelgang-attacking-critical-infrastructure-with-ransomware/"
+        ],
+        "synonyms": [
+          "CamoFei"
         ]
       },
       "related": [