diff --git a/malware/Waterbug.yar b/malware/APT_Waterbug.yar
similarity index 98%
rename from malware/Waterbug.yar
rename to malware/APT_Waterbug.yar
index 8d75e46..ef4e417 100644
--- a/malware/Waterbug.yar
+++ b/malware/APT_Waterbug.yar
@@ -5,7 +5,7 @@
 
 import "pe"
 
-rule WaterBug_wipbot_2013_core_PDF {
+rule WaterBug_wipbot_2013_core_PDF : PDF {
 	meta:
 		description = "Symantec Waterbug Attack - Trojan.Wipbot 2014 core PDF"
 		author = "Symantec Security Response"