diff --git a/clusters/surveillance-vendor.json b/clusters/surveillance-vendor.json
index d7875c3c..e8dc8920 100644
--- a/clusters/surveillance-vendor.json
+++ b/clusters/surveillance-vendor.json
@@ -180,7 +180,24 @@
       },
       "uuid": "f49bf1b6-e257-4ffc-b5ac-f0e26ef36965",
       "value": "SpyBubble"
+    },
+    {
+      "description": "Cytrox’s Israeli companies were founded in 2017 as Cytrox EMEA Ltd. and Cytrox Software Ltd. Perhaps taking a page from Candiru’s corporate obfuscation playbook, both of those companies were renamed in 2019 to Balinese Ltd. and Peterbald Ltd., respectively. We also observed one entity in Hungary, Cytrox Holdings Zrt, which was also formed in 2017.",
+      "meta": {
+        "refs": [
+          "https://citizenlab.ca/2021/12/pegasus-vs-predator-dissidents-doubly-infected-iphone-reveals-cytrox-mercenary-spyware/"
+        ],
+        "synonyms": [
+          "Cytrox EMEA Ltd.",
+          "Cytrox Software Ltd.",
+          "Balinese Ltd.",
+          "Peterbald Ltd.",
+          "Cytrox Holdings Zrt"
+        ]
+      },
+      "uuid": "4dbfa61e-0cf5-4142-babf-3cdce348568d",
+      "value": "Cytrox"
     }
   ],
-  "version": 1
+  "version": 2
 }