diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 6bc7b93..68e64ca 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -4052,7 +4052,8 @@
           "https://www.fireeye.com/content/dam/collateral/en/mtrends-2018.pdf",
           "https://www.wired.com/story/apt-34-iranian-hackers-critical-infrastructure-companies/",
           "https://unit42.paloaltonetworks.com/atoms/evasive-serpens/",
-          "https://www.microsoft.com/security/blog/2022/09/08/microsoft-investigates-iranian-attacks-against-the-albanian-government/"
+          "https://www.microsoft.com/security/blog/2022/09/08/microsoft-investigates-iranian-attacks-against-the-albanian-government/",
+          "https://www.trendmicro.com/en_us/research/24/j/earth-simnavaz-cyberattacks.html"
         ],
         "synonyms": [
           "Twisted Kitten",
@@ -4067,7 +4068,8 @@
           "Evasive Serpens",
           "Hazel Sandstorm",
           "EUROPIUM",
-          "TA452"
+          "TA452",
+          "Earth Simnavaz"
         ],
         "targeted-sector": [
           "Chemical",