{
    "type": "bundle",
    "id": "bundle--fa2a85d6-ddb0-45ba-96b6-d58280a54490",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--efe6a689-054d-4627-beb0-95da40a901c9",
            "created": "2026-03-03T06:23:23.822196Z",
            "modified": "2026-03-03T06:23:23.82224Z",
            "name": "Knowyouradversary",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d2939623-64c0-47cd-9e12-c47b775a5d95",
            "value": "workdrive.zohoexternal.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3be555f5-1f0d-5001-b84a-c6c910760fd0",
            "created": "2026-06-24T19:56:04.272186Z",
            "modified": "2026-06-24T19:56:04.272186Z",
            "name": "APT37"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--93435f47-082b-4e46-8511-2ab72b317279",
            "created_by_ref": "identity--efe6a689-054d-4627-beb0-95da40a901c9",
            "created": "2026-06-24T19:56:04.273311Z",
            "modified": "2026-06-24T19:56:04.273311Z",
            "name": "Hunting for APT37: Zoho WorkDrive Abuse",
            "published": "2026-03-01T00:00:00Z",
            "object_refs": [
                "identity--efe6a689-054d-4627-beb0-95da40a901c9",
                "domain-name--d2939623-64c0-47cd-9e12-c47b775a5d95",
                "threat-actor--3be555f5-1f0d-5001-b84a-c6c910760fd0"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.knowyouradversary.ru/2026/03/378-hunting-for-apt37-zoho-workdrive.html"
                }
            ]
        }
    ]
}