diff --git a/clusters/tool.json b/clusters/tool.json
index 5469aec..c636568 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -271,9 +271,6 @@
     {
       "value": "EvilGrab"
     },
-    {
-      "value": "IEChecker"
-    },
     {
       "value": "Trojan.Naid"
     },
@@ -496,10 +493,15 @@
       "description": "credential harvester",
       "meta": {
         "synonyms": [
-          "Sasfis"
+          "Sasfis",
+          "BackDoor-FDU",
+          "IEChecker"
         ],
         "refs": [
           "https://www2.fireeye.com/rs/848-DID-242/images/APT28-Center-of-Storm-2017.pdf"
+        ],
+        "type": [
+          "PWS"
         ]
       }
     },