diff --git a/clusters/rat.json b/clusters/rat.json
index f009463..b0b8fe5 100644
--- a/clusters/rat.json
+++ b/clusters/rat.json
@@ -407,7 +407,8 @@
       "meta": {
         "date": "2003",
         "refs": [
-          "http://securityaffairs.co/wordpress/54837/hacking/one-stop-shop-hacking.html"
+          "http://securityaffairs.co/wordpress/54837/hacking/one-stop-shop-hacking.html",
+          "https://www.bleepingcomputer.com/news/security/zoho-heavily-used-by-keyloggers-to-transmit-stolen-data/"
         ]
       },
       "uuid": "8414f79c-a879-44b6-b154-4992aa12dff1",
@@ -2940,5 +2941,5 @@
       "uuid": "5d0369ee-c718-11e8-b328-035ed1bdca07"
     }
   ],
-  "version": 17
+  "version": 18
 }
diff --git a/clusters/tool.json b/clusters/tool.json
index 794c7fd..dccdb00 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -4427,7 +4427,8 @@
       "description": "Agent Tesla is modern powerful keystroke logger. It provides monitoring your personel computer via keyboard and screenshot. Keyboard, screenshot and registered passwords are sent in log. You can receive your logs via e-mail, ftp or php(web panel). ",
       "meta": {
         "refs": [
-          "https://www.agenttesla.com/"
+          "https://www.agenttesla.com/",
+          "https://www.bleepingcomputer.com/news/security/zoho-heavily-used-by-keyloggers-to-transmit-stolen-data/"
         ]
       },
       "uuid": "f8cd62cb-b9d3-4352-8f46-0961cfde104c",
@@ -5865,5 +5866,5 @@
       "uuid": "8a2ae47a-c7b2-11e8-b223-ab4d8f78f3ef"
     }
   ],
-  "version": 91
+  "version": 92
 }