diff --git a/clusters/botnet.json b/clusters/botnet.json
index 0919053..13369ba 100644
--- a/clusters/botnet.json
+++ b/clusters/botnet.json
@@ -896,10 +896,11 @@
       "description": " we have been observing a new malware strain, which we call Torii, that differs from Mirai and other botnets we know of, particularly in the advanced techniques it uses.",
       "meta": {
         "refs": [
-          "https://blog.avast.com/new-torii-botnet-threat-research"
+          "https://blog.avast.com/new-torii-botnet-threat-research",
+          "https://www.bleepingcomputer.com/news/security/new-iot-botnet-torii-uses-six-methods-for-persistence-has-no-clear-purpose/"
         ]
       }
     }
   ],
-  "version": 13
+  "version": 14
 }