diff --git a/clusters/rat.json b/clusters/rat.json
index 40e55af..cd041ba 100644
--- a/clusters/rat.json
+++ b/clusters/rat.json
@@ -3372,7 +3372,17 @@
       },
       "uuid": "4b9b99f0-9c2d-4db5-aaff-09de88509c04",
       "value": "FlawedAmmy"
+    },
+    {
+      "description": "The Zscaler ThreatLabZ team came across a new strain of infostealer Trojan called Felipe, which silently installs itself onto a user’s system and connects to a command-and-control (C&C) server to send system information from the compromised system. This malware is compiled for both 32-bit and 64-bit Windows operating systems. Felipe basically steals the victim's debit and credit card information and sends it, along with other personal information, to the remote C&C server. It also sets a date and time to perform other malicious activity upon successful infection of the victim machine.",
+      "meta": {
+        "refs": [
+          "https://www.zscaler.com/blogs/research/felipe-new-infostealer-trojan"
+        ]
+      },
+      "uuid": "0f117f50-9657-11e9-8e2b-83e391e0ce57",
+      "value": "Felipe"
     }
   ],
-  "version": 29
+  "version": 30
 }