{
    "type": "bundle",
    "id": "bundle--c096cf8b-220f-40e8-b5d9-aef85a5ae126",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--c48c8182-30a2-4ef4-b0ce-54542b87ae11",
            "created": "2023-03-08T12:51:51.955089Z",
            "modified": "2024-11-20T11:35:16.572356Z",
            "name": "NTTSecurity",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--7611a09d-b6bc-4884-a2e5-8e0e1dfa3cb4",
            "value": "80.209.243.85"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--8c75318d-235e-4779-bf39-ced05cb4923e",
            "value": "139.60.163.206"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--4bfb30ca-8122-4fd2-bfa0-563ec01256ab",
            "value": "172.86.114.31"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--65b08bae-56ac-4e49-919f-64c426b8140d",
            "value": "162.254.35.14"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--3bf221a1-4e73-4285-848f-9abaeb20c451",
            "value": "74.119.194.205"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--42744455-0891-4243-840e-cbfca5e11cc6",
            "value": "212.85.29.133"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--517f1d6a-514b-592b-8216-43a310ad6d08",
            "created": "2026-06-24T18:11:32.857072Z",
            "modified": "2026-06-24T18:11:32.857072Z",
            "name": "ContagiousInterview"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--0e354a3b-06b5-59d8-bd4e-247d03b79526",
            "created": "2026-06-24T18:11:32.85941Z",
            "modified": "2026-06-24T18:11:32.85941Z",
            "name": "WaterPlum"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--6629f4b9-96e2-4959-b573-61938c2bfa35",
            "created_by_ref": "identity--c48c8182-30a2-4ef4-b0ce-54542b87ae11",
            "created": "2026-06-24T18:11:32.862011Z",
            "modified": "2026-06-24T18:11:32.862011Z",
            "name": "OtterCandy, malware used by WaterPlum",
            "published": "2025-10-15T00:00:00Z",
            "object_refs": [
                "identity--c48c8182-30a2-4ef4-b0ce-54542b87ae11",
                "ipv4-addr--7611a09d-b6bc-4884-a2e5-8e0e1dfa3cb4",
                "ipv4-addr--8c75318d-235e-4779-bf39-ced05cb4923e",
                "ipv4-addr--4bfb30ca-8122-4fd2-bfa0-563ec01256ab",
                "ipv4-addr--65b08bae-56ac-4e49-919f-64c426b8140d",
                "ipv4-addr--3bf221a1-4e73-4285-848f-9abaeb20c451",
                "ipv4-addr--42744455-0891-4243-840e-cbfca5e11cc6",
                "threat-actor--517f1d6a-514b-592b-8216-43a310ad6d08",
                "threat-actor--0e354a3b-06b5-59d8-bd4e-247d03b79526"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://jp.security.ntt/insights_resources/tech_blog/ottercandy_malware_e/"
                }
            ]
        }
    ]
}