diff --git a/monkey/infection_monkey/exploit/hadoop.py b/monkey/infection_monkey/exploit/hadoop.py
index 7d68798d4..c5a8b2cf3 100644
--- a/monkey/infection_monkey/exploit/hadoop.py
+++ b/monkey/infection_monkey/exploit/hadoop.py
@@ -14,9 +14,9 @@ import requests
 
 from common.common_consts.timeouts import LONG_REQUEST_TIMEOUT
 from common.tags import (
+    T1105_ATTACK_TECHNIQUE_TAG,
     T1203_ATTACK_TECHNIQUE_TAG,
     T1210_ATTACK_TECHNIQUE_TAG,
-    T1570_ATTACK_TECHNIQUE_TAG,
 )
 from infection_monkey.exploit.tools.helpers import get_agent_dst_path
 from infection_monkey.exploit.tools.http_tools import HTTPTools
@@ -33,7 +33,7 @@ logger = logging.getLogger(__name__)
 
 HADOOP_EXPLOITER_TAG = "hadoop-exploiter"
 EXPLOIT_TAGS = (HADOOP_EXPLOITER_TAG, T1203_ATTACK_TECHNIQUE_TAG, T1210_ATTACK_TECHNIQUE_TAG)
-PROPAGATION_TAGS = (HADOOP_EXPLOITER_TAG, T1570_ATTACK_TECHNIQUE_TAG)
+PROPAGATION_TAGS = (HADOOP_EXPLOITER_TAG, T1105_ATTACK_TECHNIQUE_TAG)
 
 
 class HadoopExploiter(WebRCE):