diff --git a/clusters/botnet.json b/clusters/botnet.json
index 16c7e5c..ade984d 100644
--- a/clusters/botnet.json
+++ b/clusters/botnet.json
@@ -566,6 +566,16 @@
         ]
       },
       "uuid": "cdf1148c-5358-11e8-87e5-ab60d455597f"
+    },
+    {
+      "value": "Mettle",
+      "description": "Command-and-control panel and the scanner of this botnet is hosted on a server residing in Vietnam. Attackers have been utilizing an open-sourced Mettle attack module to implant malware on vulnerable routers.",
+      "meta": {
+        "refs": [
+          "https://thehackernews.com/2018/05/botnet-malware-hacking.html"
+        ]
+      },
+      "uuid": "77a308b6-575d-11e8-89a9-3f6a2a9c08bb"
     }
   ],
   "name": "Botnet",
@@ -576,5 +586,5 @@
   ],
   "description": "botnet galaxy",
   "uuid": "a91732f4-164a-11e8-924a-ffd4097eb03f",
-  "version": 4
+  "version": 5
 }