diff --git a/clusters/ransomware.json b/clusters/ransomware.json
index b98536d..24a46d2 100644
--- a/clusters/ransomware.json
+++ b/clusters/ransomware.json
@@ -4677,6 +4677,9 @@
           ".cerber2",
           ".cerber3"
         ],
+        "synonyms": [
+          "CRBR ENCRYPTOR"
+        ],
         "encryption": "AES",
         "ransomnotes": [
           "# DECRYPT MY FILES #.html",
@@ -4694,7 +4697,8 @@
         ],
         "refs": [
           "https://blog.malwarebytes.org/threat-analysis/2016/03/cerber-ransomware-new-but-mature/",
-          "https://community.rsa.com/community/products/netwitness/blog/2016/11/04/the-evolution-of-cerber-v410"
+          "https://community.rsa.com/community/products/netwitness/blog/2016/11/04/the-evolution-of-cerber-v410",
+          "https://www.bleepingcomputer.com/news/security/cerber-renames-itself-as-crbr-encryptor-to-be-a-pita/"
         ]
       }
     },