diff --git a/clusters/branded_vulnerability.json b/clusters/branded_vulnerability.json
index 9102535..f3729e1 100644
--- a/clusters/branded_vulnerability.json
+++ b/clusters/branded_vulnerability.json
@@ -149,6 +149,11 @@
       "value": "ImageTragick"
     },
     {
+      "meta": {
+        "logo": [
+          "http://blacknurse.dk/____impro/1/onewebmedia/blacknurse2.png?etag=W%2F%2214e7-5761287d%22&sourceContentType=image%2Fpng&ignoreAspectRatio&resize=200%2B200&extract=0%2B40%2B200%2B114"
+        ]
+      },
       "uuid": "3c2325e4-b740-11e8-9504-b32b4d974add",
       "description": "Blacknurse is a low bandwidth DDoS attack involving ICMP Type 3 Code 3 packets causing high CPU loads first discovered in November 2016. The earliest samples we have seen supporting this DDoS method are from September 2017.",
       "value": "Blacknurse"