diff --git a/clusters/tool.json b/clusters/tool.json
index 871539e..cf01ef7 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -3815,6 +3815,20 @@
           "https://www.trendmicro.com/vinfo/dk/threat-encyclopedia/archive/malware/pe_ghotex.a-o"
         ]
       }
+    },
+    {
+      "value": "Shipup",
+      "description": "Trojan:Win32/Shipup.G is a trojan that modifies the Autorun feature for certain devices.",
+      "meta": {
+        "refs":
+        [
+          "https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Trojan:Win32/Shipup.G",
+          "https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Trojan%3AWin32%2FShipup.K",
+          "https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Worm:Win32/Shipup.A",
+          "https://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/W32~ShipUp-F/detailed-analysis.aspx",
+          "https://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/Troj~ShipUp-A/detailed-analysis.aspx"
+        ]
+      }
     }
   ]
 }