diff --git a/elements/threat-actor-tools.json b/elements/threat-actor-tools.json
index e87efd1..4efd044 100644
--- a/elements/threat-actor-tools.json
+++ b/elements/threat-actor-tools.json
@@ -55,6 +55,12 @@
     {
       "value": "Joy RAT"
     },
+    {
+      "value": "Lost Door RAT",
+      "synonyms": ["LostDoor RAT"],
+      "descriptions": "We recently came across a cyber attack that used a remote access Trojan (RAT) called Lost Door, a tool currently offered on social media sites. What also struck us the most about this RAT (detected as BKDR_LODORAT.A) is how it abuses the Port Forward feature in routers.",
+      "refs": ["http://blog.trendmicro.com/trendlabs-security-intelligence/lost-door-rat-accessible-customizable-attack-tool/"]
+    },
     {
       "value": "njRAT",
       "synonyms": ["Bladakindi"],