{
    "type": "bundle",
    "id": "bundle--03460d83-cb4a-42ba-b0bd-7ce0d856c220",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--59f99ee9-2b33-4e70-a488-4addc93d3d77",
            "created": "2023-03-08T12:51:43.018137Z",
            "modified": "2024-10-23T12:33:11.030915Z",
            "name": "Kaspersky",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--9ebc53ec-2526-4475-a415-82ff9463f3c6",
            "hashes": {
                "MD5": "dc0e17879d66ea9409cdf679bfea388c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--87500ef8-9383-415d-9fd4-feb7efb4fc40",
            "hashes": {
                "MD5": "f1bcb4c5aa35220757d09fc5feea193b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2e337fe0-6bd1-431a-8dcd-d346958c585b",
            "hashes": {
                "MD5": "2d47ef0089010d9b699cd1bbbc66f10a"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--0e291d56-3c3a-4395-88d8-e73d56dd5a09",
            "value": "https://www.rsdf.kr/wp-content/uploads/2024/01/index.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--5798443f-acb9-438a-bc14-c3f4e807fa78",
            "value": "https://thek-portal.com/eng/career/index.asp"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--caac11da-1a6b-4295-9ece-e99c535baa1f",
            "value": "https://htns.com/eng/skin/member/basic/skin.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--28965cbb-d3c7-4022-9be2-0dc557bdb317",
            "value": "http://dream.bluit.gethompy.com/mobile/skin/board/gallery/index.skin.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--fbd33bda-cf52-4c76-b1ec-731373e9a248",
            "value": "http://www.shcpump.com/admin/form/skin/formBasic/style.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7753a81c-428c-4475-9118-914ad286dc6c",
            "value": "https://kadsm.org/skin/board/basic/write_comment_skin.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8054d245-56eb-4710-94ff-6231b91898eb",
            "value": "http://bluekostec.com/eng/community/write.asp"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--14df1ba9-aef7-4df7-b70c-05624afb3577",
            "value": "https://builsf.com/inc/left.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d1803dd8-fdea-4f65-b390-17b570c1f5e9",
            "value": "builsf.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6f5a1865-b760-43fc-b072-a01cccbf79ff",
            "value": "dream.bluit.gethompy.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--897aea8d-9cd1-4375-8a9d-c54bc1bc8877",
            "value": "bluekostec.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a5c5f161-9cbb-41a1-a9ab-a3a7d2624768",
            "value": "htns.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1437c587-d7cd-4f75-8e6f-2df3522e03f5",
            "value": "kadsm.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--77ebbf1c-70fd-4a5f-8380-610cabe56bfa",
            "value": "thek-portal.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-06-24T21:02:25.615178Z",
            "modified": "2026-06-24T21:02:25.615178Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--7a4269d9-bb09-4394-a314-0dee0e923f31",
            "created_by_ref": "identity--59f99ee9-2b33-4e70-a488-4addc93d3d77",
            "created": "2026-06-24T21:02:25.661807Z",
            "modified": "2026-06-24T21:02:25.661807Z",
            "name": "Lazarus APT updates its toolset in watering hole attacks",
            "published": "2025-04-24T00:00:00Z",
            "object_refs": [
                "identity--59f99ee9-2b33-4e70-a488-4addc93d3d77",
                "file--9ebc53ec-2526-4475-a415-82ff9463f3c6",
                "file--87500ef8-9383-415d-9fd4-feb7efb4fc40",
                "file--2e337fe0-6bd1-431a-8dcd-d346958c585b",
                "url--0e291d56-3c3a-4395-88d8-e73d56dd5a09",
                "url--5798443f-acb9-438a-bc14-c3f4e807fa78",
                "url--caac11da-1a6b-4295-9ece-e99c535baa1f",
                "url--28965cbb-d3c7-4022-9be2-0dc557bdb317",
                "url--fbd33bda-cf52-4c76-b1ec-731373e9a248",
                "url--7753a81c-428c-4475-9118-914ad286dc6c",
                "url--8054d245-56eb-4710-94ff-6231b91898eb",
                "url--14df1ba9-aef7-4df7-b70c-05624afb3577",
                "domain-name--d1803dd8-fdea-4f65-b390-17b570c1f5e9",
                "domain-name--6f5a1865-b760-43fc-b072-a01cccbf79ff",
                "domain-name--897aea8d-9cd1-4375-8a9d-c54bc1bc8877",
                "domain-name--a5c5f161-9cbb-41a1-a9ab-a3a7d2624768",
                "domain-name--1437c587-d7cd-4f75-8e6f-2df3522e03f5",
                "domain-name--77ebbf1c-70fd-4a5f-8380-610cabe56bfa",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://securelist.com/operation-synchole-watering-hole-attacks-by-lazarus/116326/"
                }
            ]
        }
    ]
}