diff --git a/elements/threat-actor-tools.json b/elements/threat-actor-tools.json
index 4efd044..583e41a 100644
--- a/elements/threat-actor-tools.json
+++ b/elements/threat-actor-tools.json
@@ -66,6 +66,11 @@
       "synonyms": ["Bladakindi"],
       "refs": ["http://www.fidelissecurity.com/files/files/FTA_1009-njRAT_Uncovered_rev2.pdf"]
     },
+    {
+      "value": "NanoCoreRAT",
+      "synonyms": ["NanoCore"],
+      "refs": ["http://www.symantec.com/connect/blogs/nanocore-another-rat-tries-make-it-out-gutter"]
+    },
     {
       "value": "Sakula",
       "synonyms": ["Sakurel"]