diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index b5400a7..71dd290 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -8549,6 +8549,22 @@
           "RESTORE_INFO-[id].txt"
         ]
       }
+    },
+    {
+      "value": "SyncCrypt",
+      "description": "A new ransomware called SyncCrypt was discovered by Emsisoft security researcher xXToffeeXx that is being distributed by spam attachments containing WSF files. When installed these attachments will encrypt a computer and append the .kk extension to encrypted files.",
+      "meta": {
+        "refs": [
+          "https://www.bleepingcomputer.com/news/security/synccrypt-ransomware-hides-inside-jpg-files-appends-kk-extension/"
+        ],
+        "extension": [
+          ".kk"
+        ],
+        "ransomnotes": [
+          "readme.html",
+          "readme.png"
+        ]
+      }
     }
   ],
   "source": "Various",