diff --git a/monkey/infection_monkey/exploit/zerologon.py b/monkey/infection_monkey/exploit/zerologon.py
index de2633dcf..504a2080c 100644
--- a/monkey/infection_monkey/exploit/zerologon.py
+++ b/monkey/infection_monkey/exploit/zerologon.py
@@ -33,9 +33,10 @@ logger = logging.getLogger(__name__)
 
 ZEROLOGON_EXPLOIT_TAG = "zerologon-exploiter"
 T1003_TAG = "attack-t1003"
+T1098_TAG = "attack-t1098"
 
 
-ZEROLOGON_EVENT_TAGS = {ZEROLOGON_EXPLOIT_TAG, T1003_TAG}
+ZEROLOGON_EVENT_TAGS = {ZEROLOGON_EXPLOIT_TAG, T1003_TAG, T1098_TAG}
 
 
 class ZerologonExploiter(HostExploiter):