diff --git a/clusters/tool.json b/clusters/tool.json
index 671c6a69..2f1abb5b 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -10,7 +10,7 @@
   ],
   "description": "threat-actor-tools is an enumeration of tools used by adversaries. The list includes malware but also common software regularly used by the adversaries.",
   "uuid": "0d821b68-9d82-4c6d-86a6-1071a9e0f79f",
-  "version": 51,
+  "version": 52,
   "values": [
     {
       "meta": {
@@ -1485,11 +1485,14 @@
       "value": "Mirai"
     },
     {
-      "value": "Matsuta",
+      "value": "Masuta",
       "description": "IoT malware based on Mirai but slightly improved.",
       "meta": {
         "refs": [
           "https://blog.newskysecurity.com/masuta-satori-creators-second-botnet-weaponizes-a-new-router-exploit-2ddc51cc52a7"
+        ],
+        "synonyms": [
+          "PureMasuta"
         ]
       }
     },