diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index ecda36b5..573697f8 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -5700,7 +5700,9 @@
           "https://www.bleepingcomputer.com/news/security/system-cryptomix-ransomware-variant-released/",
           "https://www.bleepingcomputer.com/news/security/mole66-cryptomix-ransomware-variant-released/",
           "https://www.bleepingcomputer.com/news/security/new-backup-cryptomix-ransomware-variant-actively-infecting-users/",
-          "https://twitter.com/demonslay335/status/1072227523755470848"
+          "https://twitter.com/demonslay335/status/1072227523755470848",
+          "https://www.coveware.com/blog/cryptomix-ransomware-exploits-cancer-crowdfunding",
+          "https://www.bleepingcomputer.com/news/security/cryptomix-ransomware-exploits-sick-children-to-coerce-payments/"
         ],
         "synonyms": [
           "Zeta"
@@ -11699,5 +11701,5 @@
       "value": "Djvu"
     }
   ],
-  "version": 47
+  "version": 48
 }