{
    "type": "bundle",
    "id": "bundle--d6613221-fc76-4f26-bba8-92ab98158bc5",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--060b4e85-7875-45d1-ac04-fc212b4987d2",
            "created": "2024-11-03T23:23:20.946452Z",
            "modified": "2024-11-03T23:24:20.941689Z",
            "name": "SecurityScorecard",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--cd0fa259-ae4f-4dcf-b4b8-75efa40fd3ef",
            "value": "45.128.52.14"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--fe80cff9-5dd7-4790-8c47-c50dc00bc063",
            "value": "185.153.182.241"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--5de130dc-8ed0-4b64-85c2-68783a32c08d",
            "value": "5.253.43.122"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b76d2fcd-7bdf-46c4-bc61-2013b0443fce",
            "value": "86.104.74.51"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--96b9bb69-7994-4f46-8b46-b13a65b2df00",
            "value": "94.131.9.32"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a01f0c19-a771-45e4-804c-b825a692ee8e",
            "value": "sageskills-uk.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a2dadca9-a2e0-47f6-984b-da04cf33cd78",
            "value": "skillsage.uk"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--2db7d6c6-0d70-4394-9c81-a8833b91fa4a",
            "value": "204.188.233.68"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--a0887ee0-d165-4b11-b691-ed993c601ef8",
            "value": "70.39.70.196"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--08525d3c-5dc7-490c-bcc6-600121fc7eb7",
            "value": "175.45.178.130"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--53ba7e95-adba-4a13-ac64-4f229342a2a9",
            "value": "83.234.227.53"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--3eb273f2-f7d8-42ba-aa6e-d969ea49385b",
            "value": "175.45.178.9"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--1d67e204-052a-43bc-926b-1d88f05c2e6f",
            "value": "83.234.227.52"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--bceb4826-f477-4851-b36f-1fbf568d9909",
            "value": "175.45.178.11"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--e9d4b6ff-f35a-452d-9a8d-b1ba25880fa0",
            "value": "83.234.227.49"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--f6fb5ef7-c42e-45bd-91ec-4c8d42842362",
            "value": "70.39.70.197"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--3e3d2c36-27d9-4ffd-9c65-c0acb87bdb74",
            "value": "83.234.227.51"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--5d0b2d5e-849f-43da-aadf-065f3de285e5",
            "value": "83.234.227.50"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--c4e7f7c8-2215-40ba-891b-3227e0127992",
            "value": "45.58.143.196"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--27da4d8f-5c3d-40c8-9a75-797915e2c4c4",
            "value": "199.115.99.62"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--7cd03a0f-bc1a-4a7f-a900-b10cc198181e",
            "value": "175.45.178.10"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--72e330c5-a308-480e-8ae1-ecf83923a2c2",
            "value": "175.45.178.14"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--ccb91149-afc3-4fed-bc31-64bba6ec42e5",
            "value": "175.45.176.27"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--6b90b213-1ed4-4f9d-876d-d32803e91fdd",
            "value": "175.45.176.68"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-06-24T18:39:51.355055Z",
            "modified": "2026-06-24T18:39:51.355055Z",
            "name": "Lazarus"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--19322191-4bbf-45e5-b353-a5ea9c6f2a58",
            "created_by_ref": "identity--060b4e85-7875-45d1-ac04-fc212b4987d2",
            "created": "2026-06-24T18:39:51.357889Z",
            "modified": "2026-06-24T18:39:51.357889Z",
            "name": "Operation Phantom Circuit: North Korea's Global Data Exfiltration Campaign",
            "published": "2025-01-29T00:00:00Z",
            "object_refs": [
                "identity--060b4e85-7875-45d1-ac04-fc212b4987d2",
                "ipv4-addr--cd0fa259-ae4f-4dcf-b4b8-75efa40fd3ef",
                "ipv4-addr--fe80cff9-5dd7-4790-8c47-c50dc00bc063",
                "ipv4-addr--5de130dc-8ed0-4b64-85c2-68783a32c08d",
                "ipv4-addr--b76d2fcd-7bdf-46c4-bc61-2013b0443fce",
                "ipv4-addr--96b9bb69-7994-4f46-8b46-b13a65b2df00",
                "domain-name--a01f0c19-a771-45e4-804c-b825a692ee8e",
                "domain-name--a2dadca9-a2e0-47f6-984b-da04cf33cd78",
                "ipv4-addr--2db7d6c6-0d70-4394-9c81-a8833b91fa4a",
                "ipv4-addr--a0887ee0-d165-4b11-b691-ed993c601ef8",
                "ipv4-addr--08525d3c-5dc7-490c-bcc6-600121fc7eb7",
                "ipv4-addr--53ba7e95-adba-4a13-ac64-4f229342a2a9",
                "ipv4-addr--3eb273f2-f7d8-42ba-aa6e-d969ea49385b",
                "ipv4-addr--1d67e204-052a-43bc-926b-1d88f05c2e6f",
                "ipv4-addr--bceb4826-f477-4851-b36f-1fbf568d9909",
                "ipv4-addr--e9d4b6ff-f35a-452d-9a8d-b1ba25880fa0",
                "ipv4-addr--f6fb5ef7-c42e-45bd-91ec-4c8d42842362",
                "ipv4-addr--3e3d2c36-27d9-4ffd-9c65-c0acb87bdb74",
                "ipv4-addr--5d0b2d5e-849f-43da-aadf-065f3de285e5",
                "ipv4-addr--c4e7f7c8-2215-40ba-891b-3227e0127992",
                "ipv4-addr--27da4d8f-5c3d-40c8-9a75-797915e2c4c4",
                "ipv4-addr--7cd03a0f-bc1a-4a7f-a900-b10cc198181e",
                "ipv4-addr--72e330c5-a308-480e-8ae1-ecf83923a2c2",
                "ipv4-addr--ccb91149-afc3-4fed-bc31-64bba6ec42e5",
                "ipv4-addr--6b90b213-1ed4-4f9d-876d-d32803e91fdd",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://securityscorecard.com/blog/operation-phantom-circuit-north-koreas-global-data-exfiltration-campaign/"
                }
            ]
        }
    ]
}