diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index fd67db24..9fe0606e 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -10541,7 +10541,7 @@
     },
     {
       "value": "Sigma Ransomware",
-      "description": "",
+      "description": "Today one of our volunteers, Aura, told me about a new new malspam campaign pretending to be from Craigslist that is under way and distributing the Sigma Ransomware. These spam emails contain password protected Word or RTF documents that download the Sigma Ransomware executable from a remote site and install it on a recipients computer.",
       "meta": {
         "refs": [
           "https://www.bleepingcomputer.com/news/security/sigma-ransomware-being-distributed-using-fake-craigslist-malspam/"