diff --git a/clusters/tool.json b/clusters/tool.json
index 11e16a8d..b27989c3 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -1060,9 +1060,18 @@
         "meta": {
          "refs": ["https://www.virusbulletin.com/conference/vb2014/abstracts/back-blackenergy-2014-targeted-attacks-ukraine-and-poland/"]
         }
+    },
+    {
+       "value": "Trojan.Seaduke",
+       "description": "Trojan.Seaduke is a Trojan horse that opens a back door on the compromised computer. It may also download potentially malicious files.",
+       "refs": ["https://www.symantec.com/security_response/writeup.jsp?docid=2015-031915-4935-99"],
+       "synonyms": [ "Seaduke" ]
+    },
+    {
+        "value": "Backdoor.Tinybaron"
     }
 ],
-  "version": 4,
+  "version": 5,
   "uuid": "0d821b68-9d82-4c6d-86a6-1071a9e0f79f",
   "description": "threat-actor-tools is an enumeration of tools used by adversaries. The list includes malware but also common software regularly used by the adversaries.",
   "author": [