diff --git a/clusters/exploit-kit.json b/clusters/exploit-kit.json
index 8f66b6c..6b4b980 100755
--- a/clusters/exploit-kit.json
+++ b/clusters/exploit-kit.json
@@ -154,6 +154,16 @@
         ],
         "status": "Active"
       }
+    },
+	      {
+      "value": "Sundown-P",
+      "description": "Sundown-P/Sundown-Pirate is a rip of Sundown seen used in a private way (One group using it only) - First spotted at the end of June 2017",
+      "meta": {
+        "refs": [
+          "http://blog.trendmicro.com/trendlabs-security-intelligence/[LinkSoon]"
+        ],
+        "status": "Active"
+      }
     },
     {
       "value": "Bizarro Sundown",