diff --git a/clusters/branded_vulnerability.json b/clusters/branded_vulnerability.json
index 1f036e17..9102535a 100644
--- a/clusters/branded_vulnerability.json
+++ b/clusters/branded_vulnerability.json
@@ -147,7 +147,12 @@
       },
       "uuid": "e85e1270-eec5-4331-8004-a063125a54b4",
       "value": "ImageTragick"
+    },
+    {
+      "uuid": "3c2325e4-b740-11e8-9504-b32b4d974add",
+      "description": "Blacknurse is a low bandwidth DDoS attack involving ICMP Type 3 Code 3 packets causing high CPU loads first discovered in November 2016. The earliest samples we have seen supporting this DDoS method are from September 2017.",
+      "value": "Blacknurse"
     }
   ],
-  "version": 1
+  "version": 2
 }