{
    "type": "bundle",
    "id": "bundle--1950ded9-1a44-48f7-a9ba-0bb750ca5215",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--5ace95f0-bd6c-4fee-a494-ca40e791918d",
            "created": "2023-03-08T12:51:44.544245Z",
            "modified": "2024-09-09T23:28:33.92829Z",
            "name": "PaloaltoNetworks",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c64359ed-1b4a-4861-8c23-1c7f3d8356f2",
            "value": "outlook.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c6c4b4ba-98b8-4a40-84c3-125d9cdfc8e5",
            "value": "regioncheck.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--80b34ea6-1b51-455d-b6af-80a547519bf0",
            "value": "mirotalk.net"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--2068bade-bde8-4927-950f-81e91a5a483c",
            "value": "ebcappservices@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--0180e533-9a94-4526-a53c-d0bcfc32cb7c",
            "value": "oscar.vetres127@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--63472bb9-4346-4e09-adaf-9f16e868111d",
            "value": "zhangming_k@yahoo.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--a8ba6916-2dcf-4b6c-be83-d0a8f4f1128d",
            "value": "richard.stewart.1202@outlook.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--7251f010-8599-4437-8d23-bc980d1d32b5",
            "value": "phetchamphone1998@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--d2947129-fc0d-455c-9bea-846efe52ee43",
            "value": "casey_qadir@outlook.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--6d8e1912-4aff-4273-bc04-bb79223efb4b",
            "value": "oscar.vetres127@europe.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--2bdf2d89-02ca-4796-933a-f391c7229acc",
            "value": "truestar222@outlook.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--c3c658c5-1912-4bab-a339-00f3dff3a8e8",
            "value": "alhinglovena3000@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--f4c1d8f5-178b-4c9a-aabc-5d5745f4d849",
            "value": "truepai415@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--305283bf-1aa6-4908-98c2-1f3f09aa82f5",
            "value": "techcare127@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--d587c677-11b9-43cd-a51e-a4ed3d73815d",
            "value": "lujindane@outlook.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--ea4e0acd-8696-402a-a5cf-65b53a6645ed",
            "value": "adonis_eros@outlook.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--2494fff3-70a4-4e9b-b9a7-ffaf520a1329",
            "value": "zhuming1116@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--96d43fd0-0b9c-4b02-9e1e-36e24f546045",
            "value": "liko.sonexarth@hotmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--5c389711-60b3-4e05-8765-e9d494d9188e",
            "value": "niko.sonexarth@hotmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--8448d893-6bad-4971-ab15-d368d19ed093",
            "value": "ideationbrand@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--33f0e80a-1ae4-453c-80f3-e47ec4ad2263",
            "value": "sniper_bruce@outlook.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--6656fe2e-a462-431f-afb4-dcd2883b4545",
            "value": "mobilephetjum@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--25edb27b-12fa-4a49-96c5-861d9e40302b",
            "value": "cescernand@outlook.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--0cd6238f-1380-41ea-93b0-4296592a1687",
            "value": "legend_dev@outlook.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--3e9892aa-b425-4c8d-a8ed-064200955ca9",
            "value": "longines0924@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--bee4438b-45db-4f21-b19f-9606dea7b014",
            "value": "buyerlao@outlook.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--21f89db3-f20a-4270-9570-c65227789caf",
            "value": "liko.sonexarth@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--1bf3a821-d019-4f70-b783-fad54a5a4232",
            "value": "niko.sonexarth@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--528c38bf-414e-45cd-b005-3b7f3c57f4e4",
            "value": "jumphon2103@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--e52055a1-a2a6-42cd-b786-d4bf81778b9b",
            "value": "volodimir.work2020@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--97c71682-4882-401c-a171-871cc5bde414",
            "value": "devstar1116@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--7040530a-511a-4b23-8eac-8e4b6849c58e",
            "value": "stp.walsh33@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--7a7f883c-d9b8-4b6b-addb-ec1adbd645ac",
            "value": "reply9998@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--8ac04f59-2cc4-40c4-8161-7b4a95ca7736",
            "value": "hakajakin@outlook.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--e629d52d-631b-44ad-889a-26ad33ba7c68",
            "value": "richard.stewart.1202@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--779ccc05-4977-4878-899d-885af9140865",
            "value": "lisettekolson8@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--a47f1310-02a2-498a-9959-736180b43e92",
            "value": "brightstar1116@outlook.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--31cdcf53-9110-4513-ac89-2d54dfc9b057",
            "value": "matthewhall14541@gmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--4bd29864-ecf8-4de9-be6b-a3013be47b01",
            "value": "pinefirst@outlook.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--403fc277-5b75-4488-903d-464422e154e4",
            "value": "mirotalk.io"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7e61c093-f01b-4cb0-8901-bca9d38561d5",
            "value": "europe.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--239369de-e3d1-4bd3-b020-06bb7dee07af",
            "value": "ftpserver0909.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--ed22f2e6-eef3-4e1f-9b5b-39d99e5ce6d0",
            "value": "effertz-carroll.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8c66ebc5-095e-4116-94af-a34ed51ac4f3",
            "value": "freeconference.io"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--645e81a5-e452-4c80-924a-ba30253513fc",
            "value": "167.88.36.13"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--7319a270-a757-56b5-b122-ec8a054baae4",
            "created": "2026-06-24T21:04:31.212668Z",
            "modified": "2026-06-24T21:04:31.212668Z",
            "name": "Wagemole"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--d5a7372f-6f33-40a1-88d0-9145d2be42de",
            "created_by_ref": "identity--5ace95f0-bd6c-4fee-a494-ca40e791918d",
            "created": "2026-06-24T21:04:31.218843Z",
            "modified": "2026-06-24T21:04:31.218843Z",
            "name": "Fake North Korean IT Worker Linked to BeaverTail Video Conference App Phishing Attack",
            "published": "2024-11-14T00:00:00Z",
            "object_refs": [
                "identity--5ace95f0-bd6c-4fee-a494-ca40e791918d",
                "domain-name--c64359ed-1b4a-4861-8c23-1c7f3d8356f2",
                "domain-name--c6c4b4ba-98b8-4a40-84c3-125d9cdfc8e5",
                "domain-name--80b34ea6-1b51-455d-b6af-80a547519bf0",
                "email-addr--2068bade-bde8-4927-950f-81e91a5a483c",
                "email-addr--0180e533-9a94-4526-a53c-d0bcfc32cb7c",
                "email-addr--63472bb9-4346-4e09-adaf-9f16e868111d",
                "email-addr--a8ba6916-2dcf-4b6c-be83-d0a8f4f1128d",
                "email-addr--7251f010-8599-4437-8d23-bc980d1d32b5",
                "email-addr--d2947129-fc0d-455c-9bea-846efe52ee43",
                "email-addr--6d8e1912-4aff-4273-bc04-bb79223efb4b",
                "email-addr--2bdf2d89-02ca-4796-933a-f391c7229acc",
                "email-addr--c3c658c5-1912-4bab-a339-00f3dff3a8e8",
                "email-addr--f4c1d8f5-178b-4c9a-aabc-5d5745f4d849",
                "email-addr--305283bf-1aa6-4908-98c2-1f3f09aa82f5",
                "email-addr--d587c677-11b9-43cd-a51e-a4ed3d73815d",
                "email-addr--ea4e0acd-8696-402a-a5cf-65b53a6645ed",
                "email-addr--2494fff3-70a4-4e9b-b9a7-ffaf520a1329",
                "email-addr--96d43fd0-0b9c-4b02-9e1e-36e24f546045",
                "email-addr--5c389711-60b3-4e05-8765-e9d494d9188e",
                "email-addr--8448d893-6bad-4971-ab15-d368d19ed093",
                "email-addr--33f0e80a-1ae4-453c-80f3-e47ec4ad2263",
                "email-addr--6656fe2e-a462-431f-afb4-dcd2883b4545",
                "email-addr--25edb27b-12fa-4a49-96c5-861d9e40302b",
                "email-addr--0cd6238f-1380-41ea-93b0-4296592a1687",
                "email-addr--3e9892aa-b425-4c8d-a8ed-064200955ca9",
                "email-addr--bee4438b-45db-4f21-b19f-9606dea7b014",
                "email-addr--21f89db3-f20a-4270-9570-c65227789caf",
                "email-addr--1bf3a821-d019-4f70-b783-fad54a5a4232",
                "email-addr--528c38bf-414e-45cd-b005-3b7f3c57f4e4",
                "email-addr--e52055a1-a2a6-42cd-b786-d4bf81778b9b",
                "email-addr--97c71682-4882-401c-a171-871cc5bde414",
                "email-addr--7040530a-511a-4b23-8eac-8e4b6849c58e",
                "email-addr--7a7f883c-d9b8-4b6b-addb-ec1adbd645ac",
                "email-addr--8ac04f59-2cc4-40c4-8161-7b4a95ca7736",
                "email-addr--e629d52d-631b-44ad-889a-26ad33ba7c68",
                "email-addr--779ccc05-4977-4878-899d-885af9140865",
                "email-addr--a47f1310-02a2-498a-9959-736180b43e92",
                "email-addr--31cdcf53-9110-4513-ac89-2d54dfc9b057",
                "email-addr--4bd29864-ecf8-4de9-be6b-a3013be47b01",
                "domain-name--403fc277-5b75-4488-903d-464422e154e4",
                "domain-name--7e61c093-f01b-4cb0-8901-bca9d38561d5",
                "domain-name--239369de-e3d1-4bd3-b020-06bb7dee07af",
                "domain-name--ed22f2e6-eef3-4e1f-9b5b-39d99e5ce6d0",
                "domain-name--8c66ebc5-095e-4116-94af-a34ed51ac4f3",
                "ipv4-addr--645e81a5-e452-4c80-924a-ba30253513fc",
                "threat-actor--7319a270-a757-56b5-b122-ec8a054baae4"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://unit42.paloaltonetworks.com/fake-north-korean-it-worker-activity-cluster/"
                }
            ]
        }
    ]
}