diff --git a/lists/automated-malware-analysis/list.json b/lists/automated-malware-analysis/list.json
index da20424..7534150 100644
--- a/lists/automated-malware-analysis/list.json
+++ b/lists/automated-malware-analysis/list.json
@@ -1,7 +1,7 @@
 {
-  "name": "List of known domains used by automated malware analysis services",
-  "version": 2,
-  "description": "Domains used by automated malware analysis services",
+  "name": "List of known domains used by automated malware analysis services & security vendors",
+  "version": 3,
+  "description": "Domains used by automated malware analysis services & security vendors",
   "type": "substring",
   "matching_attributes": [
     "domain",
@@ -21,6 +21,10 @@
     "sandbox.pikker.ee",
     "www.threatexpert.com",
     "www.vicheck.ca",
-    "reverse.it"
+    "reverse.it",
+    "mcafee.com",
+    "symantec.com",
+    "securelist.com",
+    "carbonblack.com"
   ]
 }