From 7d29f57d5bc8f47b46cc0e2e9be4d32551417f46 Mon Sep 17 00:00:00 2001
From: Deborah Servili <deborah.servili@gmail.com>
Date: Wed, 31 Jan 2018 11:14:20 +0100
Subject: [PATCH] add CrossRat

---
 clusters/rat.json | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/clusters/rat.json b/clusters/rat.json
index 4f3bbed..c5948f4 100644
--- a/clusters/rat.json
+++ b/clusters/rat.json
@@ -7,7 +7,7 @@
   ],
   "description": "remote administration tool or remote access tool (RAT), also called sometimes remote access trojan, is a piece of software or programming that allows a remote \"operator\" to control a system as if they have physical access to that system.",
   "uuid": "312f8714-45cb-11e7-b898-135207cdceb9",
-  "version": 5,
+  "version": 6,
   "values": [
     {
       "meta": {
@@ -2162,6 +2162,15 @@
           "https://researchcenter.paloaltonetworks.com/2017/11/unit42-uboatrat-navigates-east-asia/"
         ]
       }
+    },
+    {
+      "description": "The EFF/Lookout report describes CrossRat as a “newly discovered desktop surveillanceware tool…which is able to target Windows, OSX, and Linux.”",
+      "value": "CrossRat",
+      "meta": {
+        "refs": [
+          "https://digitasecurity.com/blog/2018/01/23/crossrat/"
+        ]
+      }
     }
   ]
 }