diff --git a/apts/ghost_emperor/info.md b/apts/ghost_emperor/info.md
index d0465b5..83699f3 100644
--- a/apts/ghost_emperor/info.md
+++ b/apts/ghost_emperor/info.md
@@ -1 +1,3 @@
-https://securelist.com/ghostemperor-from-proxylogon-to-kernel-mode/104407/
\ No newline at end of file
+https://securelist.com/ghostemperor-from-proxylogon-to-kernel-mode/104407/
+
+https://www.sygnia.co/blog/ghost-emperor-demodex-rootkit/
\ No newline at end of file