diff --git a/clusters/tool.json b/clusters/tool.json
index 1a1513d..6ca4454 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -517,10 +517,16 @@
       "meta": {
         "synonyms": [
           "Tavdig",
-          "Epic Turla"
+          "Epic Turla",
+          "WorldCupSec", 
+          "TadjMakhal"
         ],
         "refs": [
+          "https://securelist.com/analysis/publications/65545/the-epic-turla-operation/",
           "https://www.symantec.com/content/en/us/enterprise/media/security_response/whitepapers/waterbug-attack-group.pdf"
+        ],
+        "type": [
+          "Backdoor"
         ]
       }
     },