diff --git a/clusters/android.json b/clusters/android.json
index cda8cee..574c5e0 100644
--- a/clusters/android.json
+++ b/clusters/android.json
@@ -2120,10 +2120,15 @@
     },
     {
       "value": "Igexin",
-      "description": "Igexin is an advertisement library that is bundled with certain Android applications.",
+      "description": "Igexin is an advertisement library that is bundled with certain Android applications. Igexin has the capability of spying on victims through otherwise benign apps by downloading malicious plugins,",
       "meta": {
         "refs": [
-          "https://www.symantec.com/security_response/writeup.jsp?docid=2015-032606-5519-99"
+          "https://www.symantec.com/security_response/writeup.jsp?docid=2015-032606-5519-99",
+          "https://source.android.com/security/reports/Google_Android_Security_2017_Report_Final.pdf",
+          "https://blog.lookout.com/igexin-malicious-sdk"
+        ],
+        "synonyms": [
+          "IcicleGum"
         ]
       },
       "uuid": "52c5f9b3-e9ed-4c86-b4a8-d4ebc68a4d7b"
@@ -4275,19 +4280,9 @@
         ]
       },
       "uuid": "3178ca72-2ded-11e8-846e-eb40889b4f9f"
-    },
-    {
-      "value": "Igexin",
-      "description": "Igexin has the capability of spying on victims through otherwise benign apps by downloading malicious plugins",
-      "meta": {
-        "refs": [
-          "https://blog.lookout.com/igexin-malicious-sdk"
-        ]
-      },
-      "uuid": "5400bf04-2e6b-11e8-88c3-f7aa904d55b8"
     }
   ],
-  "version": 6,
+  "version": 7,
   "uuid": "84310ba3-fa6a-44aa-b378-b9e3271c58fa",
   "description": "Android malware galaxy based on multiple open sources.",
   "authors": [