diff --git a/clusters/exploit-kit.json b/clusters/exploit-kit.json
index 18703e6..2b75433 100755
--- a/clusters/exploit-kit.json
+++ b/clusters/exploit-kit.json
@@ -243,7 +243,7 @@
         "refs": [
           "https://www.proofpoint.com/us/threat-insight/post/Hunter-Exploit-Kit-Targets-Brazilian-Banking-Customers"
         ],
-        "status": "Retired - Last seen 2017-02-06",
+        "status": "Active",
         "synonyms": [
           "3ROS Exploit Kit"
         ]