diff --git a/clusters/tool.json b/clusters/tool.json
index 032d723..bc3daf2 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -355,7 +355,20 @@
       }
     },
     {
-      "value": "NetTraveler"
+      "value": "NetTraveler",
+       "description": "APT that infected hundreds of high profile victims in more than 40 countries. Known targets of NetTraveler include Tibetan/Uyghur activists, oil industry companies, scientific research centers and institutes, universities, private companies, governments and governmental institutions, embassies and military contractors.",
+      "meta": {
+        "synonyms": [
+          "TravNet",
+          "Netfile"
+        ],
+        "refs": [
+          "https://securelist.com/blog/incidents/57455/nettraveler-is-back-the-red-star-apt-returns-with-new-tricks/"
+        ],
+        "type": [
+          "Backdoor"
+        ]
+      }
     },
     {
       "value": "Winnti"