{
    "type": "bundle",
    "id": "bundle--5b537146-e91f-4a4a-b09b-2e6f33fcc2ff",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--448b54ef-45a6-4c89-b948-eda26af60177",
            "created": "2025-01-13T10:27:33.419976Z",
            "modified": "2025-01-13T12:24:23.801074Z",
            "name": "watchTowr",
            "identity_class": "organization"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--741779e7-e4fd-40d1-922f-a6b157167e7a",
            "value": "http://www.odayexp.com/sx/key.asp?url="
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--dafe8675-0e2f-4955-b974-5fef356c283a",
            "value": "http://img2.w2img.com:80/midia_img/0f000cegVDnfw03Y33y936.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7e923a43-8b22-4612-8e11-41e893a4b76a",
            "value": "http://rst.void.ru/r57shell_version/version.php?version="
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--ab30a036-c63b-4f68-a233-1a08fff489ae",
            "value": "http://img2.w2img.com/midia_img/0f000cegVDnfw03Y33y936.gif"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--3b75f924-7a5b-4916-8031-da979bdf4a70",
            "value": "http://www.nettekiadres.com:443/imhabirligi.jpg"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6c9a257b-0ce4-4226-9551-41ed6679b2fc",
            "value": "shellci.biz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--12a8a30b-d06b-4add-9a0c-f99d3f2d9d01",
            "value": "ccteam.ru"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5a3b8689-e675-49db-b6d7-505b5426d623",
            "value": "hackru.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--60dc401c-8178-499f-86ae-e9bff29a62be",
            "value": "void.ru"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--fe18549e-d816-44e4-8fe8-7190f904b6f2",
            "value": "ll4best.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e2c4f1af-f5be-4d09-85ae-a65ec711fe67",
            "value": "drakdandy.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8eb45fa8-f93b-4d07-81c4-354f7009d3bf",
            "value": "6634596.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2dfd5952-fb13-468f-a271-c16a1714a148",
            "value": "love-1-love.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7eb04003-9d92-48c7-a62e-37c2e61f2d77",
            "value": "jbl86.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--af06e925-2fe0-45fd-ba8a-607f9b987f47",
            "value": "h0ld-up.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--dc863cfb-0cf5-49fc-a612-acc597c24c6d",
            "value": "locus7s.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--02d0df5c-3b7a-4dbb-87df-904f2c3e747d",
            "value": "localshell.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ebe10598-3d1f-465e-8e76-28e8c5a314dd",
            "value": "library-ar.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--f8b08500-290b-491e-b361-72fc52018fe9",
            "value": "yywjw.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--af5208a7-13fd-49b9-a62d-5f43c9a50780",
            "value": "templatez.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0b94a68b-23ab-470e-8bb9-255af4e6fb44",
            "value": "nettekiadres.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e76c1ee3-3207-4e33-aedb-aaefd2baad61",
            "value": "img2.w2img.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1fb4e60d-88f7-4e9b-8098-7c016bf09630",
            "value": "w2img.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1b512ff2-84d0-48f5-861d-a964b68a1722",
            "value": "aljazeera7.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--54a7d159-1bc1-4084-9550-64cf28327392",
            "value": "caspian-pirates.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a3f501ea-9e28-4d1d-9159-2f8af869ce48",
            "value": "guerrilladns.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7b5c2a11-b00d-4630-9a17-8480ba5ea3b3",
            "value": "waterski21.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0c5c8c87-e292-4e64-8e7b-fd6c90a93aaa",
            "value": "lpl38.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--524fc24a-9045-4b12-a62b-2e2f33b82520",
            "value": "csthis.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--fe4d6e48-4d07-4caa-a3df-d68310396bba",
            "value": "odayexp.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d746adbf-a6da-4f7b-85a9-8388f0318ea7",
            "value": "emp3ror.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c605a0bf-74a0-4f01-9b9b-4c9e90973b43",
            "value": "imhabirligi.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--fda78762-ab43-47ad-b158-10824aaeb672",
            "value": "alturks.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--744a929f-8567-4ccf-94f6-06674a371908",
            "value": "precision-gaming.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--085bb0e9-262e-4ef1-bacc-425dc2c7aa1c",
            "value": "ironwarez.info"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--987b48fc-4762-435d-9930-dcdee726575f",
            "value": "dcvi.net"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-06-24T19:52:59.146734Z",
            "modified": "2026-06-24T19:52:59.146734Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--5ed6e707-9f72-4a8f-8152-67d5c2a7f0e6",
            "created_by_ref": "identity--448b54ef-45a6-4c89-b948-eda26af60177",
            "created": "2026-06-24T19:52:59.147788Z",
            "modified": "2026-06-24T19:52:59.147788Z",
            "name": "Backdooring Your Backdoors - Another $20 Domain, More Governments",
            "published": "2025-01-08T00:00:00Z",
            "object_refs": [
                "identity--448b54ef-45a6-4c89-b948-eda26af60177",
                "url--741779e7-e4fd-40d1-922f-a6b157167e7a",
                "url--dafe8675-0e2f-4955-b974-5fef356c283a",
                "url--7e923a43-8b22-4612-8e11-41e893a4b76a",
                "url--ab30a036-c63b-4f68-a233-1a08fff489ae",
                "url--3b75f924-7a5b-4916-8031-da979bdf4a70",
                "domain-name--6c9a257b-0ce4-4226-9551-41ed6679b2fc",
                "domain-name--12a8a30b-d06b-4add-9a0c-f99d3f2d9d01",
                "domain-name--5a3b8689-e675-49db-b6d7-505b5426d623",
                "domain-name--60dc401c-8178-499f-86ae-e9bff29a62be",
                "domain-name--fe18549e-d816-44e4-8fe8-7190f904b6f2",
                "domain-name--e2c4f1af-f5be-4d09-85ae-a65ec711fe67",
                "domain-name--8eb45fa8-f93b-4d07-81c4-354f7009d3bf",
                "domain-name--2dfd5952-fb13-468f-a271-c16a1714a148",
                "domain-name--7eb04003-9d92-48c7-a62e-37c2e61f2d77",
                "domain-name--af06e925-2fe0-45fd-ba8a-607f9b987f47",
                "domain-name--dc863cfb-0cf5-49fc-a612-acc597c24c6d",
                "domain-name--02d0df5c-3b7a-4dbb-87df-904f2c3e747d",
                "domain-name--ebe10598-3d1f-465e-8e76-28e8c5a314dd",
                "domain-name--f8b08500-290b-491e-b361-72fc52018fe9",
                "domain-name--af5208a7-13fd-49b9-a62d-5f43c9a50780",
                "domain-name--0b94a68b-23ab-470e-8bb9-255af4e6fb44",
                "domain-name--e76c1ee3-3207-4e33-aedb-aaefd2baad61",
                "domain-name--1fb4e60d-88f7-4e9b-8098-7c016bf09630",
                "domain-name--1b512ff2-84d0-48f5-861d-a964b68a1722",
                "domain-name--54a7d159-1bc1-4084-9550-64cf28327392",
                "domain-name--a3f501ea-9e28-4d1d-9159-2f8af869ce48",
                "domain-name--7b5c2a11-b00d-4630-9a17-8480ba5ea3b3",
                "domain-name--0c5c8c87-e292-4e64-8e7b-fd6c90a93aaa",
                "domain-name--524fc24a-9045-4b12-a62b-2e2f33b82520",
                "domain-name--fe4d6e48-4d07-4caa-a3df-d68310396bba",
                "domain-name--d746adbf-a6da-4f7b-85a9-8388f0318ea7",
                "domain-name--c605a0bf-74a0-4f01-9b9b-4c9e90973b43",
                "domain-name--fda78762-ab43-47ad-b158-10824aaeb672",
                "domain-name--744a929f-8567-4ccf-94f6-06674a371908",
                "domain-name--085bb0e9-262e-4ef1-bacc-425dc2c7aa1c",
                "domain-name--987b48fc-4762-435d-9930-dcdee726575f",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://labs.watchtowr.com/more-governments-backdoors-in-your-backdoors/"
                }
            ]
        }
    ]
}