{
    "type": "bundle",
    "id": "bundle--c3bd0dbd-9c77-48b8-84db-baf6728c6079",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--a1631500-aa42-4976-be94-1c6fb4ada9ef",
            "created": "2025-12-09T04:44:34.295508Z",
            "modified": "2025-12-09T04:45:23.187309Z",
            "name": "Sysdig",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--be773ee2-60d3-49d3-8cb4-f351a8128e3e",
            "value": "193.24.123.68"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--c3b6eb5b-e890-4b0d-ad90-b2ec01365dd1",
            "value": "https://eth.drpc.org"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--1f4cb21f-646f-46c2-bcac-9cf2eb92e2f1",
            "value": "https://mainnet.gateway.tenderly.co"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--267fa1e2-0a45-48b3-9fbf-dcb1ea2a836d",
            "value": "https://ethereum-rpc.publicnode.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--fc3c397f-bd92-403b-8b08-a337fc6dd0a1",
            "value": "https://rpc.flashbots.net/fast"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--5a426865-7c1f-4de6-a06d-93a50a9063d7",
            "value": "https://eth.merkle.io"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d965e774-3d39-4548-ab8b-05729afde726",
            "value": "https://rpc.mevblocker.io"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--ff19e6ea-a40d-4da1-a6a0-eb358ae49214",
            "value": "https://eth.llamarpc.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e2cd5db0-7a1e-4c0e-b076-89d515764c70",
            "value": "https://eth-mainnet.public.blastapi.io"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--21bbcb50-845b-4bea-84ec-b88bfcb0bd90",
            "value": "https://rpc.payload.de"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3b1aa48d-cd0f-4793-9552-89007f16c176",
            "value": "rpc.payload.de"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--00ffa66c-7fea-47c4-bd1e-cd9c3fdb5680",
            "value": "eth.merkle.io"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--6625b941-a680-46ab-9098-17e7f6c48be0",
            "created_by_ref": "identity--a1631500-aa42-4976-be94-1c6fb4ada9ef",
            "created": "2026-06-24T20:58:52.551674Z",
            "modified": "2026-06-24T20:58:52.551674Z",
            "name": "EtherRAT: DPRK uses novel Ethereum implant in React2Shell attacks",
            "published": "2025-12-08T00:00:00Z",
            "object_refs": [
                "identity--a1631500-aa42-4976-be94-1c6fb4ada9ef",
                "ipv4-addr--be773ee2-60d3-49d3-8cb4-f351a8128e3e",
                "url--c3b6eb5b-e890-4b0d-ad90-b2ec01365dd1",
                "url--1f4cb21f-646f-46c2-bcac-9cf2eb92e2f1",
                "url--267fa1e2-0a45-48b3-9fbf-dcb1ea2a836d",
                "url--fc3c397f-bd92-403b-8b08-a337fc6dd0a1",
                "url--5a426865-7c1f-4de6-a06d-93a50a9063d7",
                "url--d965e774-3d39-4548-ab8b-05729afde726",
                "url--ff19e6ea-a40d-4da1-a6a0-eb358ae49214",
                "url--e2cd5db0-7a1e-4c0e-b076-89d515764c70",
                "url--21bbcb50-845b-4bea-84ec-b88bfcb0bd90",
                "domain-name--3b1aa48d-cd0f-4793-9552-89007f16c176",
                "domain-name--00ffa66c-7fea-47c4-bd1e-cd9c3fdb5680"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.sysdig.com/blog/etherrat-dprk-uses-novel-ethereum-implant-in-react2shell-attacks"
                }
            ]
        }
    ]
}