diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index 0aad797..36676c0 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -13483,7 +13483,17 @@
       },
       "uuid": "6cfa554a-1e2b-115a-400f-014d671470b1",
       "value": "Nemty"
+    },
+    {
+      "description": "Buran is a new version of the Vega ransomware strain (a.k.a. Jamper, Ghost, Buhtrap) that attacked accountants from February through April 2019. The new Buran ransomware first was discovered by nao_sec in June 2019, delivered by the RIG Exploit Kit, as reported by BleepingComputer.",
+      "meta": {
+        "refs": [
+          "https://www.acronis.com/en-us/blog/posts/meet-buran-new-delphi-ransomware-delivered-rig-exploit-kit"
+        ]
+      },
+      "uuid": "6cfa554a-1e1b-114a-300f-013d671370b0",
+      "value": "Buran"
     }
   ],
-  "version": 65
+  "version": 66
 }