{
    "type": "bundle",
    "id": "bundle--f28e5e79-1fef-40d4-ae83-7157da498599",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--31413e25-eeb6-4d87-8eb4-58a0c5652baa",
            "created": "2023-03-08T12:51:46.632587Z",
            "modified": "2025-03-11T11:46:59.41875Z",
            "name": "NCCGroup",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--cf09a960-fea3-4d9a-af90-c2824be78ede",
            "value": "thefrostery.co.uk"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--614d318c-00bf-4da3-b156-bab846b81f34",
            "value": "global-job.org"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8fc3a301-e8ad-4884-81a7-902d0cb19874",
            "hashes": {
                "SHA-256": "f4e314e8007104974681d92267673ac22721f756d8e1925142d9c26dc8a0ffb4"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8d5ab065-fa9b-4110-9971-324334953681",
            "hashes": {
                "SHA-1": "d25a4f20c0b9d982d63fc0135798384c17226b55"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--0370f727-36f2-4c85-8fc4-36ee1b199838",
            "hashes": {
                "SHA-1": "0a6f762a47557e369db8655a0d14ab088926e05b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--44c83921-edad-402a-9df9-2613375c82ce",
            "hashes": {
                "MD5": "afbcb626b770b1f87ff9b5721d2f3235"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--366f0848-5b5d-49de-8862-05900a1df8ac",
            "hashes": {
                "SHA-256": "fd02e0f5fcf97022ac266a3e54888080f66760d731903fc32df2e17e6e1e4c64"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ba170feb-30bd-4fe4-b3c2-27f63ee13ca5",
            "hashes": {
                "MD5": "49c2821a940846bdacb8a3457be4663c"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6a41e41f-4897-46fe-8612-d5e08ea45eb6",
            "value": "globaljobs.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--19f6196b-a177-4f8c-8f83-8971077f0de3",
            "value": "ats.apvit.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--defaa846-8b49-484f-b458-01a8708bcec1",
            "value": "bugs-hpsm.mobitechnologies.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--17015316-1b6b-4818-a9ae-0b384531679c",
            "value": "13.88.245.250"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7699d452-af60-4537-aedf-867a4a97de52",
            "value": "shoppingbagsdirect.com"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--09d73f3d-fddf-4a95-9ff1-c1e9e4194f1f",
            "created_by_ref": "identity--31413e25-eeb6-4d87-8eb4-58a0c5652baa",
            "created": "2026-06-24T21:04:32.854795Z",
            "modified": "2026-06-24T21:04:32.854795Z",
            "name": "North Korea\u2019s Lazarus: their initial access trade-craft using social media and social engineering",
            "published": "2022-05-05T00:00:00Z",
            "object_refs": [
                "identity--31413e25-eeb6-4d87-8eb4-58a0c5652baa",
                "domain-name--cf09a960-fea3-4d9a-af90-c2824be78ede",
                "domain-name--614d318c-00bf-4da3-b156-bab846b81f34",
                "file--8fc3a301-e8ad-4884-81a7-902d0cb19874",
                "file--8d5ab065-fa9b-4110-9971-324334953681",
                "file--0370f727-36f2-4c85-8fc4-36ee1b199838",
                "file--44c83921-edad-402a-9df9-2613375c82ce",
                "file--366f0848-5b5d-49de-8862-05900a1df8ac",
                "file--ba170feb-30bd-4fe4-b3c2-27f63ee13ca5",
                "domain-name--6a41e41f-4897-46fe-8612-d5e08ea45eb6",
                "domain-name--19f6196b-a177-4f8c-8f83-8971077f0de3",
                "domain-name--defaa846-8b49-484f-b458-01a8708bcec1",
                "ipv4-addr--17015316-1b6b-4818-a9ae-0b384531679c",
                "domain-name--7699d452-af60-4537-aedf-867a4a97de52"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://research.nccgroup.com/2022/05/05/north-koreas-lazarus-and-their-initial-access-trade-craft-using-social-media-and-social-engineering/"
                }
            ]
        }
    ]
}