diff --git a/clusters/rat.json b/clusters/rat.json
index a69212b5..42526c0e 100644
--- a/clusters/rat.json
+++ b/clusters/rat.json
@@ -3278,7 +3278,16 @@
       },
       "uuid": "5d0369ee-c718-11e8-b328-035ed1bdca07",
       "value": "NukeSped"
+    },
+    {
+      "value": "TheOneSpy",
+      "description": " Remotely monitor and control any wrong activity of kids on all smartphones & computers",
+      "meta": {
+        "refs": [
+          "https://www.theonespy.com/"
+        ]
+      }
     }
   ],
-  "version": 21
+  "version": 22
 }
diff --git a/clusters/tool.json b/clusters/tool.json
index 4a2b1fb8..4530ea5f 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -2472,7 +2472,8 @@
       "description": "Crimson is malware used as part of a campaign known as Operation Transparent Tribe that targeted Indian diplomatic and military victims",
       "meta": {
         "refs": [
-          "https://www.proofpoint.com/sites/default/files/proofpoint-operation-transparent-tribe-threat-insight-en.pdf"
+          "https://www.proofpoint.com/sites/default/files/proofpoint-operation-transparent-tribe-threat-insight-en.pdf",
+          "https://www.amnesty.org/download/Documents/ASA3383662018ENGLISH.PDF"
         ],
         "type": [
           "Backdoor"
@@ -7403,5 +7404,5 @@
       "value": "China Chopper"
     }
   ],
-  "version": 99
+  "version": 100
 }