diff --git a/clusters/exploit-kit.json b/clusters/exploit-kit.json
index 78b25e0..9b7e91a 100644
--- a/clusters/exploit-kit.json
+++ b/clusters/exploit-kit.json
@@ -45,7 +45,8 @@
       "meta": {
         "refs": [
           "https://www.nao-sec.org/2018/09/hello-fallout-exploit-kit.html",
-          "https://www.bleepingcomputer.com/news/security/new-fallout-exploit-kit-drops-gandcrab-ransomware-or-redirects-to-pups/"
+          "https://www.bleepingcomputer.com/news/security/new-fallout-exploit-kit-drops-gandcrab-ransomware-or-redirects-to-pups/",
+          "https://www.bleepingcomputer.com/news/security/fallout-exploit-kit-now-installing-the-kraken-cryptor-ransomware/"
         ],
         "status": "Active",
         "synonyms": [
diff --git a/clusters/tool.json b/clusters/tool.json
index dccdb00..5f6c6f9 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -5864,7 +5864,16 @@
         ]
       },
       "uuid": "8a2ae47a-c7b2-11e8-b223-ab4d8f78f3ef"
+    },
+    {
+      "value": "CoalaBot",
+      "meta": {
+        "refs:": [
+          "https://malware.dontneedcoffee.com/2017/10/coalabot-http-ddos-bot.html"
+        ]
+      },
+      "uuid": "92628a72-c874-11e8-a094-ebbb3bd1f412"
     }
   ],
-  "version": 92
+  "version": 93
 }