{
    "type": "bundle",
    "id": "bundle--77f91b8f-3453-457d-9a68-6826ddf319c7",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--a7637369-4c22-475d-848c-c58572f8adc5",
            "created": "2023-03-08T12:51:47.940092Z",
            "modified": "2025-06-18T23:08:00.610817Z",
            "name": "Huntress",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--23e49f2a-6706-4dd5-a01b-ae2d187a7114",
            "value": "support.us05web-zoom.biz"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--30f92215-fa15-47c9-acf1-29342ab917d3",
            "hashes": {
                "SHA-256": "c4db903322d17c8cbf1d1db55124854c0b070d6ece54162b6a4d06df24c572df"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c83c2257-e70c-491a-a87b-3f20ca807645",
            "hashes": {
                "SHA-256": "3dd226d0b700f33974f409142defb62a8cd172ae5f2eb9beb7f5750eb1702e2a"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--4cd2a1e7-1331-4bf5-9533-a99473c86e2c",
            "value": "https://metamask.awaitingfor.site/update"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--41558e2d-8f90-4e8a-930a-4aec7abddebe",
            "value": "metamask.awaitingfor.site"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0c362b3c-fbcf-4380-9e11-eb62a25098df",
            "value": "safefor.xyz"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--bf91df83-0b81-4a67-bbcc-74a3b962cffa",
            "value": "readysafe.xyz"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--641a9e92-47c7-415a-8865-b99fbee9959c",
            "hashes": {
                "SHA-256": "469fd8a280e89a6edd0d704d0be4c7e0e0d8d753e314e9ce205d7006b573865f"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b4411cc0-d53a-4946-820b-451e1442ba0e",
            "hashes": {
                "SHA-256": "1ddef717bf82e61bf79b24570ab68bf899f420a62ebd4715c2ae0c036da5ce05"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--06f41ead-9fed-4af8-8689-c4910cc1cf7a",
            "hashes": {
                "SHA-256": "ad21af758af28b7675c55e64bf5a9b3318f286e4963ff72470a311c2e18f42ff"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b4fe346e-ea7f-4507-bb78-cca749871ace",
            "hashes": {
                "SHA-256": "080a52b99d997e1ac60bd096a626b4d7c9253f0c7b7c4fc8523c9d47a71122af"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d01a3d5b-92cc-4721-8fd5-6cb8e71b8956",
            "hashes": {
                "SHA-256": "432c720a9ada40785d77cd7e5798de8d43793f6da31c5e7b3b22ee0a451bb249"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ce95afad-90ef-44a9-a52e-72ca9943d82b",
            "hashes": {
                "SHA-256": "14e9bb6df4906691fc7754cf7906c3470a54475c663bd2514446afad41fa1527"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--017ec175-2252-4a6d-a2b7-b72a1d136fa5",
            "hashes": {
                "SHA-256": "2e30c9e3f0324011eb983eef31d82a1ca2d47bbd13a6d32d9e11cb89392af23d"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d66c3e2d-0406-4367-8350-1ae93333fe98",
            "hashes": {
                "SHA-256": "4cd5df82e1d4f93361e71624730fbd1dd2f8ccaec7fc7cbdfa87497fb5cb438c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--874d57dc-0c07-4386-9ba9-784401f9e62b",
            "hashes": {
                "SHA-256": "ad01beb19f5b8c7155ee5415781761d4c7d85a31bb90b618c3f5d9f737f2d320"
            }
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb",
            "created": "2026-06-24T19:25:39.966682Z",
            "modified": "2026-06-24T19:25:39.966682Z",
            "name": "Bluenoroff"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--170e6183-9636-4ce5-a661-263c7fdc3232",
            "created_by_ref": "identity--a7637369-4c22-475d-848c-c58572f8adc5",
            "created": "2026-06-24T19:25:39.969269Z",
            "modified": "2026-06-24T19:25:39.969269Z",
            "name": "Inside the BlueNoroff Web3 macOS Intrusion Analysis",
            "published": "2025-06-18T00:00:00Z",
            "object_refs": [
                "identity--a7637369-4c22-475d-848c-c58572f8adc5",
                "domain-name--23e49f2a-6706-4dd5-a01b-ae2d187a7114",
                "file--30f92215-fa15-47c9-acf1-29342ab917d3",
                "file--c83c2257-e70c-491a-a87b-3f20ca807645",
                "url--4cd2a1e7-1331-4bf5-9533-a99473c86e2c",
                "domain-name--41558e2d-8f90-4e8a-930a-4aec7abddebe",
                "domain-name--0c362b3c-fbcf-4380-9e11-eb62a25098df",
                "domain-name--bf91df83-0b81-4a67-bbcc-74a3b962cffa",
                "file--641a9e92-47c7-415a-8865-b99fbee9959c",
                "file--b4411cc0-d53a-4946-820b-451e1442ba0e",
                "file--06f41ead-9fed-4af8-8689-c4910cc1cf7a",
                "file--b4fe346e-ea7f-4507-bb78-cca749871ace",
                "file--d01a3d5b-92cc-4721-8fd5-6cb8e71b8956",
                "file--ce95afad-90ef-44a9-a52e-72ca9943d82b",
                "file--017ec175-2252-4a6d-a2b7-b72a1d136fa5",
                "file--d66c3e2d-0406-4367-8350-1ae93333fe98",
                "file--874d57dc-0c07-4386-9ba9-784401f9e62b",
                "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.huntress.com/blog/inside-bluenoroff-web3-intrusion-analysis"
                }
            ]
        }
    ]
}