diff --git a/clusters/tool.json b/clusters/tool.json
index dbbcd0d..efed80e 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -1133,7 +1133,8 @@
       "meta": {
         "synonyms": [
           "Tordal",
-          "Chanitor"
+          "Chanitor",
+          "Pony"
         ],
         "refs": [
           "https://www.proofpoint.com/us/threat-insight/post/hancitor-ruckguv-reappear"