From 4bef48b33e4020baca7fc4340efd4e0db68dc99a Mon Sep 17 00:00:00 2001
From: Deborah Servili <deborah.servili@gmail.com>
Date: Tue, 6 Aug 2019 13:28:32 +0200
Subject: [PATCH] add Amavaldo

---
 clusters/tool.json | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/clusters/tool.json b/clusters/tool.json
index f9779b7..82ec890 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -7798,6 +7798,15 @@
       },
       "uuid": "9ff6e087-6755-447a-b537-8f06c7aa4a85",
       "value": "Bookworm"
+    },
+    {
+      "value": "Amavaldo",
+      "description": "We named the malware family described in the rest of this blog post Amavaldo. This family is still in active development – the latest version we have observed (10.7) has a compilation timestamp of June 10th, 2019.",
+      "meta": {
+        "refs": [
+          "https://www.welivesecurity.com/2019/08/01/banking-trojans-amavaldo/"
+        ]
+      }
     }
   ],
   "version": 122