diff --git a/2021/2021.09.09.Dark_Covenant/cta-2021-0909.pdf b/2021/2021.09.09.Dark_Covenant/cta-2021-0909.pdf
new file mode 100644
index 0000000..a2531c7
Binary files /dev/null and b/2021/2021.09.09.Dark_Covenant/cta-2021-0909.pdf differ
diff --git a/README.md b/README.md
index 5d3f368..3d567d4 100644
--- a/README.md
+++ b/README.md
@@ -30,6 +30,7 @@ Please fire issue to me if any lost APT/Malware events/campaigns.
 ## 2021
 * Sep 14 - [[McAfee] Operation ‘Harvest’: A Deep Dive into a Long-term Campaign](https://www.mcafee.com/blogs/enterprise/mcafee-enterprise-atr/operation-harvest-a-deep-dive-into-a-long-term-campaign/) | [:closed_book:](../../blob/master/2021/2021.09.14.Operation_Harvest)
 * Sep 13 - [[Trend Micro] APT-C-36 Updates Its Spam Campaign Against South American Entities With Commodity RATs](https://www.trendmicro.com/en_us/research/21/i/apt-c-36-updates-its-long-term-spam-campaign-against-south-ameri.html) | [:closed_book:](../../blob/master/2021/2021.09.13.APT-C-36_South_American)
+* Sep 09 - [[Recorded Future] Dark Covenant: Connections Between the Russian State and Criminal Actors](https://www.recordedfuture.com/russian-state-connections-criminal-actors/) | [:closed_book:](../../blob/master/2021/2021.09.09.Dark_Covenant)
 * Sep 08 - [[Fireeye] Pro-PRC Influence Campaign Expands to Dozens of Social Media Platforms, Websites, and Forums in at Least Seven Languages, Attempted to Physically Mobilize Protesters in the U.S.](https://www.fireeye.com/blog/threat-research/2021/09/pro-prc-influence-campaign-social-media-websites-forums.html) | [:closed_book:](../../blob/master/2021/2021.09.08.Pro-PRC_Campaign)
 * Aug 25 - [[Bitdefender] FIN8 Threat Actor Spotted Once Again with New "Sardonic" Backdoor](https://www.bitdefender.com/blog/labs/fin8-threat-actor-spotted-once-again-with-new-sardonic-backdoor/) | [:closed_book:](../../blob/master/2021/2021.08.25.FIN8_Sardonic_Backdoor)
 * Aug 19 - [[Sentinel] ShadowPad | A Masterpiece of Privately Sold Malware in Chinese Espionage](https://labs.sentinelone.com/shadowpad-a-masterpiece-of-privately-sold-malware-in-chinese-espionage/) | [:closed_book:](../../blob/master/2021/2021.08.19.ShadowPad)