diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index d93512cf..f9fe3b6c 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -5534,6 +5534,15 @@
           "crjoker.html"
         ]
       },
+      "related": [
+        {
+          "dest-uuid": "10f92054-b028-11e8-a51f-2f82236ac72d",
+          "tags": [
+            "estimative-language:likelihood-probability=\"likely\""
+          ],
+          "type": "similar"
+        }
+      ],
       "uuid": "2fb307a2-8752-4521-8973-75b68703030d",
       "value": "CryptoJoker"
     },
@@ -10918,6 +10927,15 @@
           "https://twitter.com/malwrhunterteam/status/1034492151541977088"
         ]
       },
+      "related": [
+        {
+          "dest-uuid": "2fb307a2-8752-4521-8973-75b68703030d",
+          "tags": [
+            "estimative-language:likelihood-probability=\"likely\""
+          ],
+          "type": "similar"
+        }
+      ],
       "uuid": "10f92054-b028-11e8-a51f-2f82236ac72d",
       "value": "CryptoNar"
     },
diff --git a/clusters/tool.json b/clusters/tool.json
index 9ff6433d..1465e423 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -3190,6 +3190,13 @@
             "estimative-language:likelihood-probability=\"likely\""
           ],
           "type": "similar"
+        },
+        {
+          "dest-uuid": "e6085ce0-af6d-41f7-8bcb-7f2eed246941",
+          "tags": [
+            "estimative-language:likelihood-probability=\"likely\""
+          ],
+          "type": "similar"
         }
       ],
       "uuid": "67d712c8-d254-4820-83fa-9a892b87923b",
@@ -3202,6 +3209,15 @@
           "https://securityintelligence.com/tag/shiz-trojan-malware/"
         ]
       },
+      "related": [
+        {
+          "dest-uuid": "67d712c8-d254-4820-83fa-9a892b87923b",
+          "tags": [
+            "estimative-language:likelihood-probability=\"likely\""
+          ],
+          "type": "similar"
+        }
+      ],
       "uuid": "e6085ce0-af6d-41f7-8bcb-7f2eed246941",
       "value": "Shiz"
     },