{
    "type": "bundle",
    "id": "bundle--3e4ac105-1b8f-4ce4-b63a-1de299e2eaca",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--5d199e7e-198c-47e8-ad62-397e3bd362e2",
            "created": "2023-03-08T12:51:51.400428Z",
            "modified": "2024-08-19T23:43:12.521753Z",
            "name": "Group-IB",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--c8513ef9-9102-437e-aaa0-1dc3a8e81760",
            "hashes": {
                "SHA-256": "fb3f47bbd5fe5b7a89f7305688823cd7b986693eeae3a26bcdaf94c318a8bcd3"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4d554de1-d416-48a2-827b-6726762aa941",
            "hashes": {
                "SHA-256": "e889dc3c95d160c30d675351e6ba1050e0d2ef04ce0b6074277c422a215e932e"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--28c0664d-64aa-4c80-bb02-449c81d224cc",
            "hashes": {
                "SHA-256": "c8f27cf9b6fe3de41642c75f64ce955a094a646d907ca2937534ec0d81bdd6d1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--995b0a8c-d2bc-4fdc-ac48-d991b83d763c",
            "hashes": {
                "SHA-256": "06ac32672777f4b7b3e890a9afabde9af3fee85c8d8a83429c5fadd04c298309"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--95a70dcc-5590-44d5-b039-a462e00b271a",
            "hashes": {
                "SHA-256": "d36a330038c7ec5b04c6e5da42071083d87806447b2236fcaa964bfef302a82b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--fa1c0054-dad7-4db7-81de-1c76f1d5cfd0",
            "hashes": {
                "SHA-256": "51043929f82412a87be8fc315f73c0fc41dd46ae8e45d3e427d03df9dbe8c9e5"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--4e7ae5eb-643b-4a1a-bf2c-fd23af5385dd",
            "hashes": {
                "SHA-256": "79570a46d94301c0b89a8fd0539b0770bc375829b1c42d1ee8e0d4b7b44f8f7c"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--48b5269f-5c6c-4ea7-b610-02469acab0a9",
            "value": "coinpayments.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2fa5a120-8154-4aa3-9cbf-8529def99d3b",
            "value": "signedbooksandcollectibles.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--2f61f4f1-dd18-445a-b7f2-f531bdee23d8",
            "value": "technokain.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--67e7131f-8531-4a36-941c-4d504616673b",
            "value": "stefanoturco.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--77cbd0bd-8034-4dc7-82e7-b3a423b286d2",
            "value": "luxmodelagency.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--df58d224-a357-4cf6-ab85-4deb211e5c6d",
            "value": "areac-agr.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--88a0471e-0457-463d-8d47-98627785397d",
            "value": "darvishkhan.net"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-06-24T21:11:12.429031Z",
            "modified": "2026-06-24T21:11:12.429031Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--74256f09-24ba-4fa4-a5c2-07b07cc68e14",
            "created_by_ref": "identity--5d199e7e-198c-47e8-ad62-397e3bd362e2",
            "created": "2026-06-24T21:11:12.430063Z",
            "modified": "2026-06-24T21:11:12.430063Z",
            "name": "Lazarus BTC Changer: Back in action with JS sniffers redesigned to steal crypto",
            "published": "2021-04-14T00:00:00Z",
            "object_refs": [
                "identity--5d199e7e-198c-47e8-ad62-397e3bd362e2",
                "file--c8513ef9-9102-437e-aaa0-1dc3a8e81760",
                "file--4d554de1-d416-48a2-827b-6726762aa941",
                "file--28c0664d-64aa-4c80-bb02-449c81d224cc",
                "file--995b0a8c-d2bc-4fdc-ac48-d991b83d763c",
                "file--95a70dcc-5590-44d5-b039-a462e00b271a",
                "file--fa1c0054-dad7-4db7-81de-1c76f1d5cfd0",
                "file--4e7ae5eb-643b-4a1a-bf2c-fd23af5385dd",
                "domain-name--48b5269f-5c6c-4ea7-b610-02469acab0a9",
                "domain-name--2fa5a120-8154-4aa3-9cbf-8529def99d3b",
                "domain-name--2f61f4f1-dd18-445a-b7f2-f531bdee23d8",
                "domain-name--67e7131f-8531-4a36-941c-4d504616673b",
                "domain-name--77cbd0bd-8034-4dc7-82e7-b3a423b286d2",
                "domain-name--df58d224-a357-4cf6-ab85-4deb211e5c6d",
                "domain-name--88a0471e-0457-463d-8d47-98627785397d",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.group-ib.com/blog/btc-changer/"
                }
            ]
        }
    ]
}