{
    "type": "bundle",
    "id": "bundle--3bca380d-10d7-4b17-8200-89547606ad70",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--f124ebed-440c-493a-a454-005060f3b4d8",
            "created": "2023-03-08T12:51:57.814175Z",
            "modified": "2026-04-22T13:31:24.745811Z",
            "name": "TrendMicro",
            "identity_class": "organization"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--017a7dce-37d7-472f-80cc-d64713722748",
            "hashes": {
                "SHA-256": "d91c233b2f1177357387c29d92bd3f29fab7b90760e59a893a0f447ef2cb4715"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cc8e29b5-5f17-4fec-a005-400eba7902a2",
            "hashes": {
                "SHA-256": "735365ef9aa6cca946cfef9a4b85f68e7f9f03011da0cf5f5ab517a381e40d02"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--efce9994-e4dc-490f-a888-7f9dcafc8358",
            "hashes": {
                "SHA-256": "6f7a5f1d52d3bfc6f175bf2bbb665e4bd99b0453e2d2e27712fe9b71c55962dc"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--3e9ae80b-125f-4182-8523-b364a98f94d6",
            "value": "https://indagator.club/board.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--806125ea-c892-444f-9e89-ef783ab67d5e",
            "value": "https://craypot.live/board.php"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--21a92486-678d-46d8-958f-343003ab3756",
            "value": "https://crabbedly.club/board.php"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--22a5f25f-6b7b-4386-949b-99499b0f1021",
            "value": "indagator.club"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a2219f90-f918-4f70-8699-eb2ecde705d9",
            "value": "craypot.live"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--be74511d-602a-4726-a237-29272e98ba1c",
            "value": "crabbedly.club"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-06-24T21:01:43.87418Z",
            "modified": "2026-06-24T21:01:43.87418Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--8ef25bde-c07b-4e0d-a3de-81c4a5b3b54d",
            "created_by_ref": "identity--f124ebed-440c-493a-a454-005060f3b4d8",
            "created": "2026-06-24T21:01:43.87522Z",
            "modified": "2026-06-24T21:01:43.87522Z",
            "name": "Mac Backdoor Linked to Lazarus Targets Korean Users",
            "published": "2019-11-20T00:00:00Z",
            "object_refs": [
                "identity--f124ebed-440c-493a-a454-005060f3b4d8",
                "file--017a7dce-37d7-472f-80cc-d64713722748",
                "file--cc8e29b5-5f17-4fec-a005-400eba7902a2",
                "file--efce9994-e4dc-490f-a888-7f9dcafc8358",
                "url--3e9ae80b-125f-4182-8523-b364a98f94d6",
                "url--806125ea-c892-444f-9e89-ef783ab67d5e",
                "url--21a92486-678d-46d8-958f-343003ab3756",
                "domain-name--22a5f25f-6b7b-4386-949b-99499b0f1021",
                "domain-name--a2219f90-f918-4f70-8699-eb2ecde705d9",
                "domain-name--be74511d-602a-4726-a237-29272e98ba1c",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://blog.trendmicro.com/trendlabs-security-intelligence/mac-backdoor-linked-to-lazarus-targets-korean-users/"
                }
            ]
        }
    ]
}