diff --git a/clusters/botnet.json b/clusters/botnet.json
index 12f09be..db9b92d 100644
--- a/clusters/botnet.json
+++ b/clusters/botnet.json
@@ -886,7 +886,16 @@
         }
       ],
       "uuid": "025ab0ce-bffc-11e8-be19-d70ec22c5d56"
+    },
+    {
+      "value": "Torii",
+      "description": " we have been observing a new malware strain, which we call Torii, that differs from Mirai and other botnets we know of, particularly in the advanced techniques it uses.",
+      "meta": {
+        "refs": [
+          "https://blog.avast.com/new-torii-botnet-threat-research"
+        ]
+      }
     }
   ],
-  "version": 12
+  "version": 13
 }