diff --git a/clusters/tool.json b/clusters/tool.json
index d713f87b..53bd9921 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -7266,14 +7266,17 @@
       "value": "FASTCash"
     },
     {
-      "description": "ZEBROCY is a tool used by APT28, which has been observed since late 2015. The communications module used by ZEBROCY transmits using HTTP. The implant has key logging and file exfiltration functionality and utilises a file collection capability that identifies files with particular extensions.",
+      "description": "Zebrocy is a tool used by APT28, which has been observed since late 2015. The communications module used by Zebrocy transmits using HTTP. The implant has key logging and file exfiltration functionality and utilises a file collection capability that identifies files with particular extensions.",
       "meta": {
         "refs": [
           "https://www.ncsc.gov.uk/alerts/indicators-compromise-malware-used-apt28"
+        ],
+        "synonyms": [
+          "Zekapab"
         ]
       },
       "uuid": "8a2ae47a-c7b2-11e8-b223-ab4d8f78f3ef",
-      "value": "ZEBROCY"
+      "value": "Zebrocy"
     },
     {
       "meta": {
@@ -7583,5 +7586,5 @@
       "value": "SLUB Backdoor"
     }
   ],
-  "version": 113
+  "version": 114
 }