diff --git a/clusters/tool.json b/clusters/tool.json
index 28dea06..0416b74 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -2616,6 +2616,9 @@
       "meta": {
         "refs": [
           "https://www.fireeye.com/blog/threat-research/2017/04/cve-2017-0199_useda.html"
+        ],
+        "synonyms": [
+            "BlackOasis"
         ]
       },
       "description": "Though we have not identified the targets, FINSPY is sold by Gamma Group to multiple nation-state clients, and we assess with moderate confidence that it was being used along with the zero-day to carry out cyber espionage.",