diff --git a/clusters/android.json b/clusters/android.json
index 4f08fb2a..2a745daa 100644
--- a/clusters/android.json
+++ b/clusters/android.json
@@ -87,7 +87,8 @@
       "meta": {
         "refs": [
           "https://blog.fortinet.com/2017/09/19/a-look-into-the-new-strain-of-bankbot",
-          "https://forensics.spreitzenbarth.de/android-malware/"
+          "https://forensics.spreitzenbarth.de/android-malware/",
+          "https://blog.avast.com/mobile-banking-trojan-sneaks-into-google-play-targeting-wells-fargo-chase-and-citibank-customers"
         ]
       }
     },