diff --git a/clusters/android.json b/clusters/android.json
index f006e85..d6614bb 100644
--- a/clusters/android.json
+++ b/clusters/android.json
@@ -4290,9 +4290,19 @@
         ]
       },
       "uuid": "72c37e24-4ead-11e8-8f08-db3ec8f8db86§"
+    },
+    {
+      "value": "MysteryBot",
+      "description": "Cybercriminals are currently developing a new strain of malware targeting Android devices which blends the features of a banking trojan, keylogger, and mobile ransomware.",
+      "meta": {
+        "refs": [
+          "https://www.bleepingcomputer.com/news/security/new-mysterybot-android-malware-packs-a-banking-trojan-keylogger-and-ransomware/"
+        ]
+      },
+      "uuid": "53e2e7e8-70a8-11e8-b0f8-33fcf651adaf"
     }
   ],
-  "version": 8,
+  "version": 9,
   "uuid": "84310ba3-fa6a-44aa-b378-b9e3271c58fa",
   "description": "Android malware galaxy based on multiple open sources.",
   "authors": [