diff --git a/clusters/tool.json b/clusters/tool.json
index eb7a68ac..c2f5985e 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -1119,10 +1119,6 @@
         ]
       }
     },
-    {
-      "value": "Locky",
-      "description": "Ransomware"
-    },
     {
       "value": "Necurs",
       "description": "The Necurs botnet is a distributor of many pieces of malware, most notably Locky.",
@@ -1394,6 +1390,7 @@
         "refs": [
           "https://blog.cylance.com/shell-crew-variants-continue-to-fly-under-big-avs-radar"
         ]
+        ck
       }
     },
     {