diff --git a/clusters/tool.json b/clusters/tool.json
index 6cc4dae..d800258 100644
--- a/clusters/tool.json
+++ b/clusters/tool.json
@@ -5706,7 +5706,17 @@
       },
       "uuid": "f7f53bb8-37ed-4bbe-9809-ca1594431536",
       "value": "KEYMARBLE"
+    },
+    {
+      "value": "BISKVIT",
+      "description": "The BISKVIT Trojan is a multi-component malware written in C#. We dubbed this malware BISKVIT based on the namespaces used in the code, which contain the word “biscuit”.  Unfortunately, there is already an existing unrelated malware called BISCUIT, so BISKVIT is used instead, which is the Russian translation of biscuit.",
+      "meta": {
+        "refs": [
+          "https://www.fortinet.com/blog/threat-research/russian-army-exhibition-decoy-leads-to-new-biskvit-malware.html"
+        ]
+      },
+      "uuid": "69ed8a69-8b33-4195-9b21-a1f4cd76acde"
     }
   ],
-  "version": 84
+  "version": 85
 }