{
    "type": "bundle",
    "id": "bundle--caafbc11-380e-423c-a175-69112fc40017",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--2f95b092-a863-417a-b53a-7c1beabbf131",
            "created": "2023-03-08T12:51:50.895591Z",
            "modified": "2023-03-08T12:51:50.89567Z",
            "name": "Cybleinc",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--305c56e6-7d5d-47ae-8553-4c1092425b3d",
            "hashes": {
                "SHA-256": "fe1a734019f0dc714bd3360e2369853ea97c02f108afe963769318934470967b"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--ced94b61-16a3-4855-8745-ae3f8d11249c",
            "value": "http://app.at-me.ml/index.php?m=b&p1=56d92eaa24f68947&p2=a"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--6c5f1364-c576-4a95-a2a3-85c3a798f09e",
            "value": "http://app.at-me.ml/index.php?m=d&p1=56d92eaa24f68947"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a96631ed-2d73-45ae-902c-9692894350ad",
            "value": "app.at-me.ml"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--ef1c62ee-37dd-4919-a686-24f796553e52",
            "value": "104.128.239.70"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--2094875a-b0ab-468e-92fb-2b5e8afeb451",
            "value": "http://app.at-me.ml/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--01620549-397e-4105-8e6c-543e3238698f",
            "value": "http://app.at-me.ml/index.php?m=c&p1=3666e8b2182d8249"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--0416dc5b-66f8-49b4-baaf-b67447a36555",
            "value": "http://app.at-me.ml/"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--43098629-6f2b-4ef5-9b12-b3e82ec52df9",
            "value": "amibreached.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T18:40:39.519676Z",
            "modified": "2026-06-24T18:40:39.519676Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--81c60686-5c2f-4b07-ac80-0e3a6a020fc6",
            "created_by_ref": "identity--2f95b092-a863-417a-b53a-7c1beabbf131",
            "created": "2026-06-24T18:40:39.53563Z",
            "modified": "2026-06-24T18:40:39.53563Z",
            "name": "Kimsuky APT Group Distributes Fake Security App Disguised as KISA Security Program",
            "published": "2021-06-03T00:00:00Z",
            "object_refs": [
                "identity--2f95b092-a863-417a-b53a-7c1beabbf131",
                "file--305c56e6-7d5d-47ae-8553-4c1092425b3d",
                "url--ced94b61-16a3-4855-8745-ae3f8d11249c",
                "url--6c5f1364-c576-4a95-a2a3-85c3a798f09e",
                "domain-name--a96631ed-2d73-45ae-902c-9692894350ad",
                "ipv4-addr--ef1c62ee-37dd-4919-a686-24f796553e52",
                "url--2094875a-b0ab-468e-92fb-2b5e8afeb451",
                "url--01620549-397e-4105-8e6c-543e3238698f",
                "url--0416dc5b-66f8-49b4-baaf-b67447a36555",
                "domain-name--43098629-6f2b-4ef5-9b12-b3e82ec52df9",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://cyble.com/blog/kimsuky-apt-group-distributes-fake-security-app-disguised-as-kisa-security-program/"
                }
            ]
        }
    ]
}