diff --git a/clusters/android.json b/clusters/android.json
index 25bd48b..4f08fb2 100644
--- a/clusters/android.json
+++ b/clusters/android.json
@@ -3735,6 +3735,19 @@
           "https://www.symantec.com/security_response/writeup.jsp?docid=2012-080818-0448-99"
         ]
       }
+    },
+    {
+      "value": "SLocker",
+      "description": "The SLocker family is one of the oldest mobile lock screen and file-encrypting ransomware and used to impersonate law enforcement agencies to convince victims to pay their ransom.",
+      "meta": {
+        "refs": [
+          "http://blog.trendmicro.com/trendlabs-security-intelligence/mobile-ransomware-pocket-sized-badness/",
+          "http://blog.trendmicro.com/trendlabs-security-intelligence/slocker-mobile-ransomware-starts-mimicking-wannacry/"
+        ],
+        "synonyms": [
+          "SMSLocker"
+        ]
+      }
     }
   ],
   "version": 3,