diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 8942b0a..4406ed1 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -2401,7 +2401,8 @@
           "https://blog.google/threat-analysis-group/continued-cyber-activity-in-eastern-europe-observed-by-tag",
           "https://blog.google/threat-analysis-group/fog-of-war-how-the-ukraine-conflict-transformed-the-cyber-threat-landscape/",
           "https://www.bsi.bund.de/DE/Themen/Unternehmen-und-Organisationen/Cyber-Sicherheitslage/Analysen-und-Prognosen/Threat-Intelligence/Aktive_APT-Gruppen/aktive-apt-gruppen_node.html",
-          "https://bluepurple.binaryfirefly.com/p/bluepurple-pulse-week-ending-june-64e"
+          "https://bluepurple.binaryfirefly.com/p/bluepurple-pulse-week-ending-june-64e",
+          "https://www.volexity.com/blog/2024/11/22/the-nearest-neighbor-attack-how-a-russian-apt-weaponized-nearby-wi-fi-networks-for-covert-access/"
         ],
         "synonyms": [
           "Pawn Storm",
@@ -2429,7 +2430,8 @@
           "Sofacy",
           "Forest Blizzard",
           "BlueDelta",
-          "Fancy Bear"
+          "Fancy Bear",
+          "GruesomeLarch"
         ],
         "targeted-sector": [
           "Military",