diff --git a/clusters/tool.json b/clusters/tool.json
index a77699f..f474d8c 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -1,5 +1,23 @@
 {
   "values": [
+    {
+      "value": "Tinba",
+      "description": "Banking Malware",
+      "meta": {
+        "refs": [
+          "https://thehackernews.com/search/label/Zusy%20Malware",
+          "http://blog.trendmicro.com/trendlabs-security-intelligence/the-tinbatinybanker-malware/"
+        ],
+        "synonyms": [
+          "Hunter",
+          "Zusy",
+          "TinyBanker"
+        ],
+        "type": [
+          "Banking"
+        ]
+      }
+    },
     {
       "value": "PlugX",
       "description": "Malware",