diff --git a/clusters/tool.json b/clusters/tool.json
index 46a361b..645896e 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -491,9 +491,16 @@
     },
     {
       "value": "Agent.BTZ",
+      "description": "In November 2014, the experts of the G DATA SecurityLabs published an article about ComRAT, the Agent.BTZ successor. We explained that this case is linked to the Uroburos rootkit.",
       "meta": {
         "synonyms": [
           "ComRat"
+        ],
+        "refs": [
+          "https://blog.gdatasoftware.com/2015/01/23927-evolution-of-sophisticated-spyware-from-agent-btz-to-comrat"
+        ],
+        "type": [
+          "Backdoor"
         ]
       }
     },