diff --git a/elements/threat-actor-tools.json b/elements/threat-actor-tools.json
index 321008e..bebf77a 100644
--- a/elements/threat-actor-tools.json
+++ b/elements/threat-actor-tools.json
@@ -448,6 +448,10 @@
     {
       "value": "HDRoot",
       "refs": ["http://williamshowalter.com/a-universal-windows-bootkit/"]
+    },
+    {
+      "value": "IRONGATE",
+      "refs": ["https://www.fireeye.com/blog/threat-research/2016/06/irongate_ics_malware.html"]
     }
   ],
   "version" : 1,