diff --git a/clusters/tool.json b/clusters/tool.json
index f4ff3f5..f27cca8 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -7233,7 +7233,8 @@
       "description": "rootkit for the Unified Extensible Firmware Interface (UEFI). Used by APT28. The researchers named the rootkit LoJax, after the malicious samples of the LoJack anti-theft software that were discovered earlier this year.",
       "meta": {
         "refs": [
-          "https://www.bleepingcomputer.com/news/security/apt28-uses-lojax-first-uefi-rootkit-seen-in-the-wild/"
+          "https://www.bleepingcomputer.com/news/security/apt28-uses-lojax-first-uefi-rootkit-seen-in-the-wild/",
+          "https://www.bleepingcomputer.com/news/security/lojax-command-and-control-domains-still-active/"
         ]
       },
       "uuid": "6d53a74e-c8a5-11e8-a123-332e4eaac9bb",
@@ -7510,5 +7511,5 @@
       "value": "OSX.BadWord"
     }
   ],
-  "version": 107
+  "version": 108
 }