{
    "type": "bundle",
    "id": "bundle--e2e2aaa9-39cb-43ea-a494-bacbf5433fb4",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--48edf75c-7cd8-480a-8950-deb15067ea29",
            "created": "2026-04-13T05:27:30.708162Z",
            "modified": "2026-04-22T01:03:40.519059Z",
            "name": "BreakGlassIntelligence",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e82342f4-d193-4183-8892-5590a3a6a304",
            "hashes": {
                "SHA-256": "48109c33cf45749a7fdc2629a4c11d9afc59e5378a4a368e08b20f9dbfca7963"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--e6860cf1-24e3-4e7d-9966-be504fbf0ee1",
            "hashes": {
                "MD5": "b81d8031450264845cdf79851b6a4807"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--b690cae7-4d10-4e94-8a48-bb49e3a590d5",
            "hashes": {
                "SHA-1": "5dfa031ccd4cb45f5338eeaad6416a54b15bf0f8"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--55fe9b39-8fdf-417f-a8e5-a77c0a5090e8",
            "value": "https://api.mainnet-beta.solana.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--04de3f5d-4a70-49c1-a1e9-d213cc057feb",
            "value": "vultrusercontent.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--15742b1e-b33f-4ec0-988b-d712c26e7146",
            "value": "api.mainnet-beta.solana.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--8b0b71e7-f798-428a-b6d3-ed551f992630",
            "value": "217.69.11.57"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--fd17774d-2978-4431-84f7-3d2833a6aadf",
            "value": "45.32.151.157"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--7f1ecc03-0d79-4c05-bb76-277a0c0fa2f2",
            "value": "45.32.150.97"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--f8755cf7-70b4-477d-b9f3-bb1765d2c0f2",
            "value": "217.69.0.159"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--ceff57eb-fd5e-4a1f-b84a-7b2a7d165b54",
            "value": "217.69.11.60"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--f22f30e5-56d5-4626-ac2e-d566d66a2e25",
            "value": "45.76.44.240"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--048a332b-fac6-4b71-a06e-6e8fcff950d2",
            "value": "217.69.11.99"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--8a41ce71-b2d4-5fc7-9a01-40a7672a1fc9",
            "created": "2026-06-24T18:43:31.867896Z",
            "modified": "2026-06-24T18:43:31.867896Z",
            "name": "TraderTraitor"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--b0f9a087-c2db-41b9-8397-4d793c2a64d7",
            "created_by_ref": "identity--48edf75c-7cd8-480a-8950-deb15067ea29",
            "created": "2026-06-24T18:43:31.887423Z",
            "modified": "2026-06-24T18:43:31.887423Z",
            "name": "Lazarus Group is Using the Solana Blockchain as a Dead-Drop C2 Channel -- and Nobody Noticed for 4 Months",
            "published": "2026-03-16T00:00:00Z",
            "object_refs": [
                "identity--48edf75c-7cd8-480a-8950-deb15067ea29",
                "file--e82342f4-d193-4183-8892-5590a3a6a304",
                "file--e6860cf1-24e3-4e7d-9966-be504fbf0ee1",
                "file--b690cae7-4d10-4e94-8a48-bb49e3a590d5",
                "url--55fe9b39-8fdf-417f-a8e5-a77c0a5090e8",
                "domain-name--04de3f5d-4a70-49c1-a1e9-d213cc057feb",
                "domain-name--15742b1e-b33f-4ec0-988b-d712c26e7146",
                "ipv4-addr--8b0b71e7-f798-428a-b6d3-ed551f992630",
                "ipv4-addr--fd17774d-2978-4431-84f7-3d2833a6aadf",
                "ipv4-addr--7f1ecc03-0d79-4c05-bb76-277a0c0fa2f2",
                "ipv4-addr--f8755cf7-70b4-477d-b9f3-bb1765d2c0f2",
                "ipv4-addr--ceff57eb-fd5e-4a1f-b84a-7b2a7d165b54",
                "ipv4-addr--f22f30e5-56d5-4626-ac2e-d566d66a2e25",
                "ipv4-addr--048a332b-fac6-4b71-a06e-6e8fcff950d2",
                "threat-actor--8a41ce71-b2d4-5fc7-9a01-40a7672a1fc9"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://intel.breakglass.tech/post/lazarus-group-is-using-the-solana-blockchain-as-a-dead-drop-c2-channel-and-nobody-noticed-for-4-months"
                }
            ]
        }
    ]
}