{
    "type": "bundle",
    "id": "bundle--95ab21b4-dc62-4caa-961e-616373a34ece",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--18a3a1f0-eb3d-4bbc-904e-ee52948913a7",
            "created": "2023-03-08T12:51:43.431426Z",
            "modified": "2023-03-08T12:51:43.431505Z",
            "name": "Malwarebytes",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--26f5f719-10d7-4bc6-b42a-04184ff0dc0d",
            "value": "58.229.208.146"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--9b865e9f-c7b6-4a12-94df-3a2792075b06",
            "value": "27.102.114.89"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--775bd54e-19c2-4a27-80dd-ab40d80a0f4c",
            "value": "27.102.107.63"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--1dba661f-66ca-43b6-9700-3f951bb9147d",
            "value": "tjkim1991@gmail.com"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--238e6de8-8f05-4bd8-a4a1-de3cc7782db2",
            "value": "http://myaccount.google.nkaac.net/signin"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--c1319f7d-87f9-4fad-a21a-edc0c3f04485",
            "value": "https://signin.gmrail.ml"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--710e2752-cd40-4f65-a2ee-23c5b881ca1b",
            "value": "https://accounts.grnail-signing.work/v2"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--b4950e85-55ff-4518-a590-b6621f2cc083",
            "value": "https://signin.grnail-login.ml"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--a870cf5c-f871-4e69-9511-8c3a7073694a",
            "value": "https://protect.grnail-signin.ga/v2"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e21fb886-c0c4-4207-a7a3-69cdaee07dc3",
            "value": "https://myaccount.google-signin.ga/signin"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--afab5f14-8a61-4746-88a9-8e51a04f4b9e",
            "value": "https://myaccounts-gmail.autho.co/signin"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e01de8a5-2f29-443e-9b9f-ef64a49d39f1",
            "value": "https://myaccount.grnail-security.work/v2"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--95b1c7cd-5673-4bd4-978e-836b6d990f6d",
            "value": "https://myaccounts.grnail-signin.ga/v2"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--505cce7e-b2c2-4244-a7b1-292bead97cab",
            "value": "http://accounts.goggle.hol.es/MyAccount"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d5d58de1-07f0-4fc1-94e5-3e03cec896cb",
            "value": "https://myaccount.grnail-signing.work/v2"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e2a34fc9-af27-476b-a4d5-7e8151309f5a",
            "value": "https://myaccount.grnail-signin.ga/v2"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8f3b8ef4-a230-440d-aa72-f3d2ae671379",
            "value": "https://login.gmeil.kro.kr"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--f286990f-c664-4cc2-b793-2d9d383aca34",
            "value": "https://accounts.google-manager.ga/signin"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--6f996c49-ddf9-4076-8f6d-c2efacdd6ee9",
            "value": "https://accounts.grnail-signin.ga/v2"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--ebb1defb-4503-4658-b7d5-c8ac5bbdf977",
            "value": "http://myaccount.google.newkda.com/signin"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8ec3b461-0ec7-492f-9235-c93ec1c7ea1d",
            "value": "https://myaccount.google.newkda.com/signin"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--887e0b95-768d-4107-b92d-4e75b5384a10",
            "value": "https://account.googgle.kro.kr"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d3b488c9-bb8c-4778-baad-8e92305b47b4",
            "value": "https://login.gmail-account.gq"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--59e483f3-de30-4087-8973-28087554ddcb",
            "value": "https://accounts.google-signin.ga/v2"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8391b4ae-0292-4fc8-b02e-2599bb573286",
            "value": "https://account.grnail-signin.ga/v2"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e5793de1-7ae0-4d07-8b00-1232142c5eaf",
            "value": "http://myaccounts-gmail.kr-infos.com/signin"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e256f7da-4817-4609-86b3-8ed196ce887c",
            "value": "http://myaccount.cgmail.pe.hu/signin"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--668ff9fe-9099-4eba-96c6-39e8ebb7af83",
            "value": "accounts.grnail-signin.ga"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2ce787cf-90f1-4fda-9831-255fbc33b5c3",
            "value": "signin.gmrail.ml"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--bf96e44e-287a-4c28-bc37-eddd03ea8cb9",
            "value": "myaccount.google.newkda.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--071104e9-a952-4ff5-afe4-dad08973e9a5",
            "value": "accounts.google-signin.ga"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b917334d-6d40-44c9-ac44-480b1b27f59c",
            "value": "account.grnail-signin.ga"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--76573ba3-32bb-425c-886d-37962a8d5e87",
            "value": "myaccount.google.nkaac.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6883a575-31f9-44eb-b509-c55dcdaba36d",
            "value": "login.gmeil.kro.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d3dfa3f7-40d5-4cc3-b32d-15c0d7253109",
            "value": "accounts.grnail-signing.work"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c99341c9-db59-4e29-92a1-fd162b5604e0",
            "value": "signin.grnail-login.ml"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--43f78496-73cc-4adb-ba48-2cb8193ac9e1",
            "value": "login.gmail-account.gq"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a98d5827-2337-416d-a5e3-89fcff7e3434",
            "value": "accounts.goggle.hol.es"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--52181a70-3525-4758-a92f-346211b1a61c",
            "value": "myaccount.grnail-signing.work"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--daeb5ec3-4500-4384-a935-98b404084d32",
            "value": "myaccounts-gmail.kr-infos.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--85b5aff6-9298-4f86-be0f-4bcab27c1392",
            "value": "accounts.google-manager.ga"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4003279f-f62a-43b6-a9bb-65ecc4e9c297",
            "value": "myaccount.google-signin.ga"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--89cc393f-3d18-4913-85cf-c4ad379c87fd",
            "value": "myaccount.cgmail.pe.hu"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--bcd0bfe5-55cc-4b0a-8d39-6847a8628f1b",
            "value": "account.googgle.kro.kr"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--10c0dc38-0f71-41b5-9a4d-88a44b0c1f80",
            "value": "protect.grnail-signin.ga"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--227bced4-f54b-4d38-8ef5-4e5d12dceaad",
            "value": "myaccounts.grnail-signin.ga"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8c9bf767-5df2-4f42-8c11-9b1781718b5e",
            "value": "myaccounts-gmail.autho.co"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--35fce5de-93ba-4e3c-ad50-c3ac32a2999c",
            "value": "myaccount.grnail-signin.ga"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--12128230-8171-495c-8e92-3971b97f2423",
            "value": "myaccount.grnail-security.work"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--e8cba095-7362-4783-825f-0e24b2285c5b",
            "value": "210.16.121.137"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--bb89cd89-7ed7-43f5-847b-c75c92da8722",
            "value": "45.58.55.73"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a4740201-e07c-41f3-8704-891feec61db8",
            "value": "216.189.157.89"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--265ee80d-72a7-4ce1-92f5-25fa83fa893e",
            "value": "210.16.120.34"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--99aa190a-0008-4858-9243-91f72116b2b9",
            "value": "45.13.135.103"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T23:57:19.001491Z",
            "modified": "2026-06-24T23:57:19.001491Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--c76d0877-13ca-4755-8820-904c93447ed3",
            "created_by_ref": "identity--18a3a1f0-eb3d-4bbc-904e-ee52948913a7",
            "created": "2026-06-24T23:57:19.039355Z",
            "modified": "2026-06-24T23:57:19.039355Z",
            "name": "Kimsuky APT continues to target South Korean government using AppleSeed backdoor",
            "published": "2021-06-01T00:00:00Z",
            "object_refs": [
                "identity--18a3a1f0-eb3d-4bbc-904e-ee52948913a7",
                "ipv4-addr--26f5f719-10d7-4bc6-b42a-04184ff0dc0d",
                "ipv4-addr--9b865e9f-c7b6-4a12-94df-3a2792075b06",
                "ipv4-addr--775bd54e-19c2-4a27-80dd-ab40d80a0f4c",
                "email-addr--1dba661f-66ca-43b6-9700-3f951bb9147d",
                "url--238e6de8-8f05-4bd8-a4a1-de3cc7782db2",
                "url--c1319f7d-87f9-4fad-a21a-edc0c3f04485",
                "url--710e2752-cd40-4f65-a2ee-23c5b881ca1b",
                "url--b4950e85-55ff-4518-a590-b6621f2cc083",
                "url--a870cf5c-f871-4e69-9511-8c3a7073694a",
                "url--e21fb886-c0c4-4207-a7a3-69cdaee07dc3",
                "url--afab5f14-8a61-4746-88a9-8e51a04f4b9e",
                "url--e01de8a5-2f29-443e-9b9f-ef64a49d39f1",
                "url--95b1c7cd-5673-4bd4-978e-836b6d990f6d",
                "url--505cce7e-b2c2-4244-a7b1-292bead97cab",
                "url--d5d58de1-07f0-4fc1-94e5-3e03cec896cb",
                "url--e2a34fc9-af27-476b-a4d5-7e8151309f5a",
                "url--8f3b8ef4-a230-440d-aa72-f3d2ae671379",
                "url--f286990f-c664-4cc2-b793-2d9d383aca34",
                "url--6f996c49-ddf9-4076-8f6d-c2efacdd6ee9",
                "url--ebb1defb-4503-4658-b7d5-c8ac5bbdf977",
                "url--8ec3b461-0ec7-492f-9235-c93ec1c7ea1d",
                "url--887e0b95-768d-4107-b92d-4e75b5384a10",
                "url--d3b488c9-bb8c-4778-baad-8e92305b47b4",
                "url--59e483f3-de30-4087-8973-28087554ddcb",
                "url--8391b4ae-0292-4fc8-b02e-2599bb573286",
                "url--e5793de1-7ae0-4d07-8b00-1232142c5eaf",
                "url--e256f7da-4817-4609-86b3-8ed196ce887c",
                "domain-name--668ff9fe-9099-4eba-96c6-39e8ebb7af83",
                "domain-name--2ce787cf-90f1-4fda-9831-255fbc33b5c3",
                "domain-name--bf96e44e-287a-4c28-bc37-eddd03ea8cb9",
                "domain-name--071104e9-a952-4ff5-afe4-dad08973e9a5",
                "domain-name--b917334d-6d40-44c9-ac44-480b1b27f59c",
                "domain-name--76573ba3-32bb-425c-886d-37962a8d5e87",
                "domain-name--6883a575-31f9-44eb-b509-c55dcdaba36d",
                "domain-name--d3dfa3f7-40d5-4cc3-b32d-15c0d7253109",
                "domain-name--c99341c9-db59-4e29-92a1-fd162b5604e0",
                "domain-name--43f78496-73cc-4adb-ba48-2cb8193ac9e1",
                "domain-name--a98d5827-2337-416d-a5e3-89fcff7e3434",
                "domain-name--52181a70-3525-4758-a92f-346211b1a61c",
                "domain-name--daeb5ec3-4500-4384-a935-98b404084d32",
                "domain-name--85b5aff6-9298-4f86-be0f-4bcab27c1392",
                "domain-name--4003279f-f62a-43b6-a9bb-65ecc4e9c297",
                "domain-name--89cc393f-3d18-4913-85cf-c4ad379c87fd",
                "domain-name--bcd0bfe5-55cc-4b0a-8d39-6847a8628f1b",
                "domain-name--10c0dc38-0f71-41b5-9a4d-88a44b0c1f80",
                "domain-name--227bced4-f54b-4d38-8ef5-4e5d12dceaad",
                "domain-name--8c9bf767-5df2-4f42-8c11-9b1781718b5e",
                "domain-name--35fce5de-93ba-4e3c-ad50-c3ac32a2999c",
                "domain-name--12128230-8171-495c-8e92-3971b97f2423",
                "ipv4-addr--e8cba095-7362-4783-825f-0e24b2285c5b",
                "ipv4-addr--bb89cd89-7ed7-43f5-847b-c75c92da8722",
                "ipv4-addr--a4740201-e07c-41f3-8704-891feec61db8",
                "ipv4-addr--265ee80d-72a7-4ce1-92f5-25fa83fa893e",
                "ipv4-addr--99aa190a-0008-4858-9243-91f72116b2b9",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blog.malwarebytes.com/threat-analysis/2021/06/kimsuky-apt-continues-to-target-south-korean-government-using-appleseed-backdoor/"
                }
            ]
        }
    ]
}