diff --git a/clusters/tool.json b/clusters/tool.json
index 72f1a37..3025a76 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -460,7 +460,17 @@
       }
     },
     {
-      "value": "XSControl"
+      "value": "XSControl",
+      "description": "Backdoor user by he Naikon APT group",
+      "meta": {
+        "refs": [
+          "https://securelist.com/analysis/publications/69953/the-naikon-apt/",
+          "https://kasperskycontenthub.com/securelist/files/2015/05/TheNaikonAPT-MsnMM.pdf"
+        ],
+        "type": [
+          "Backdoor"
+        ]
+      }
     },
     {
       "value": "NETEAGLE"
@@ -628,6 +638,9 @@
         ],
         "refs": [
           "https://www2.fireeye.com/rs/848-DID-242/images/APT28-Center-of-Storm-2017.pdf"
+        ],
+        "type": [
+          "Backdoor"
         ]
       }
     },