diff --git a/clusters/android.json b/clusters/android.json
index c8b24bbb..232d31e8 100644
--- a/clusters/android.json
+++ b/clusters/android.json
@@ -4653,7 +4653,18 @@
       },
       "uuid": "aef548fb-76f5-4eb9-9942-f189cb0d16f6",
       "value": "Razdel"
+    },
+    {
+      "description": "Vulture is an Android banking trojan found in Google Play by ThreatFabric. It uses screen recording and keylogging as main strategy to harvest login credentials.",
+      "meta": {
+        "refs": [
+          "https://www.threatfabric.com/blogs/vultur-v-for-vnc.html",
+          "https://twitter.com/_icebre4ker_/status/1485651238175846400"
+        ]
+      },
+      "uuid": "66026639-132f-436e-8348-1219714e9f62",
+      "value": "Vulture"
     }
   ],
-  "version": 20
+  "version": 21
 }