{
    "type": "bundle",
    "id": "bundle--60c8dcb6-15e5-41c4-a6ff-0864e70cc51b",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--1b2e4fa5-1dfa-4915-86ec-a2fa45d88f2f",
            "created": "2023-05-17T06:45:31.091598Z",
            "modified": "2023-05-17T06:45:31.091643Z",
            "name": "DCSO",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--9915c9bf-525f-4f00-a266-524e57912f79",
            "value": "sfrclak.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--80e7e8d8-7edf-47e2-af5e-d83f1479276b",
            "value": "ifstap@proton.me"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--663d1619-80f7-43b5-87d1-12d1ccbfc38c",
            "value": "nrwise@proton.me"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--15d803c1-f248-4623-af7b-f379f2a36962",
            "value": "http://sfrclak.com:8000/6202033"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--794180bf-52c3-45df-bf94-6810144b7a2f",
            "value": "142.11.206.73"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--e6b0245a-9e01-402b-a19a-d67c5fd48719",
            "value": "23.254.167.216"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--129291c6-cd42-464a-b870-febb137bb00e",
            "value": "http://sfrclak.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--dd5d1c26-df20-4fa3-ac83-b2955b9549cb",
            "value": "http://sfrclak.com:8000"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--aadb5bf5-29cf-47d3-9487-11cc0e11b59a",
            "value": "23.254.203.244"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb",
            "created": "2026-06-24T16:05:58.782356Z",
            "modified": "2026-06-24T16:05:58.782356Z",
            "name": "Bluenoroff"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--1d94ce0a-dc4c-4fac-a474-46189f9689e4",
            "created_by_ref": "identity--1b2e4fa5-1dfa-4915-86ec-a2fa45d88f2f",
            "created": "2026-06-24T16:05:58.790342Z",
            "modified": "2026-06-24T16:05:58.790342Z",
            "name": "From Axios NPM Supply Chain Attack to Tracking DPRK\u2019s BlueNoroff",
            "published": "2026-04-03T00:00:00Z",
            "object_refs": [
                "identity--1b2e4fa5-1dfa-4915-86ec-a2fa45d88f2f",
                "domain-name--9915c9bf-525f-4f00-a266-524e57912f79",
                "email-addr--80e7e8d8-7edf-47e2-af5e-d83f1479276b",
                "email-addr--663d1619-80f7-43b5-87d1-12d1ccbfc38c",
                "url--15d803c1-f248-4623-af7b-f379f2a36962",
                "ipv4-addr--794180bf-52c3-45df-bf94-6810144b7a2f",
                "ipv4-addr--e6b0245a-9e01-402b-a19a-d67c5fd48719",
                "url--129291c6-cd42-464a-b870-febb137bb00e",
                "url--dd5d1c26-df20-4fa3-ac83-b2955b9549cb",
                "ipv4-addr--aadb5bf5-29cf-47d3-9487-11cc0e11b59a",
                "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://medium.com/@DCSO_CyTec/from-axios-npm-supply-chain-attack-to-tracking-dprks-bluenoroff-c9080c9b4ce3"
                }
            ]
        }
    ]
}