diff --git a/clusters/tool.json b/clusters/tool.json
index 97b7e4e7..df6f2d0e 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -2890,6 +2890,15 @@
         ]
       }
     },
+    {
+      "value": "CowerSnail",
+      "description": "CowerSnail was compiled using Qt and linked with various libraries. This framework provides benefits such as cross-platform capability and transferability of the source code between different operating systems. ",
+      "meta": {
+        "refs": [
+          "https://securelist.com/cowersnail-from-the-creators-of-sambacry/79087/"
+        ]
+      }
+    },
     {
       "description": "n mid-July 2017, we found a new modification of the well-known mobile banking malware family Svpeng – Trojan-Banker.AndroidOS.Svpeng.ae. In this modification, the cybercriminals have added new functionality: it now also works as a keylogger, stealing entered text through the use of accessibility services.",
       "value": "Svpeng",