{
    "type": "bundle",
    "id": "bundle--97e52509-d69b-4ad4-a0d9-a9c662939c18",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--f124ebed-440c-493a-a454-005060f3b4d8",
            "created": "2023-03-08T12:51:57.814175Z",
            "modified": "2026-04-22T13:31:24.745811Z",
            "name": "TrendMicro",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--fa2ad4c3-c8e8-4b3b-8576-655bc3120083",
            "value": "188.43.33.252"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--d972fd32-18f7-4d6c-8369-e083acd810e4",
            "value": "188.43.33.250"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--70b59883-f25d-44d1-938c-fe7cdecc20b3",
            "value": "175.45.176.21"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--db15124f-ad51-405a-844b-5754df2f4774",
            "value": "188.43.136.116"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--3b0cbf91-ccad-4e51-893c-6f80ff10098a",
            "value": "175.45.176.22"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--66c7e554-1532-45cb-942a-d1f3f9144869",
            "value": "188.43.136.115"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3f09597e-e502-4921-904a-7aec3c004810",
            "value": "blocknovas.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--b838b64d-37a7-40ad-b11b-7017aa5db90f",
            "value": "188.43.33.251"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e625c35b-009c-435c-ae6b-a26676295a9a",
            "value": "mail.blocknovas.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--f4015ac5-77f3-47df-a697-07bec735bb15",
            "value": "167.88.39.141"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--6e797715-a2ed-49c1-ba22-7dbdd2b0e7a9",
            "value": "188.43.33.249"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--9c8ed2b1-2a1a-4a4d-961b-b0d448db3109",
            "value": "188.43.33.253"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--0fe945fc-9748-4d21-9eb1-dcc009cdcb8d",
            "value": "95.164.18.177"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--dc6ca068-de3c-5372-b9fb-4fdf345f917c",
            "created": "2026-06-25T00:00:07.774926Z",
            "modified": "2026-06-25T00:00:07.774926Z",
            "name": "VoidDokkaebi"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--a22e5f65-0508-4dfc-8f0f-f067e7e38d9d",
            "created_by_ref": "identity--f124ebed-440c-493a-a454-005060f3b4d8",
            "created": "2026-06-25T00:00:07.775905Z",
            "modified": "2026-06-25T00:00:07.775905Z",
            "name": "Russian Infrastructure Plays Crucial Role in North Korean Cybercrime Operations",
            "published": "2025-04-23T00:00:00Z",
            "object_refs": [
                "identity--f124ebed-440c-493a-a454-005060f3b4d8",
                "ipv4-addr--fa2ad4c3-c8e8-4b3b-8576-655bc3120083",
                "ipv4-addr--d972fd32-18f7-4d6c-8369-e083acd810e4",
                "ipv4-addr--70b59883-f25d-44d1-938c-fe7cdecc20b3",
                "ipv4-addr--db15124f-ad51-405a-844b-5754df2f4774",
                "ipv4-addr--3b0cbf91-ccad-4e51-893c-6f80ff10098a",
                "ipv4-addr--66c7e554-1532-45cb-942a-d1f3f9144869",
                "domain-name--3f09597e-e502-4921-904a-7aec3c004810",
                "ipv4-addr--b838b64d-37a7-40ad-b11b-7017aa5db90f",
                "domain-name--e625c35b-009c-435c-ae6b-a26676295a9a",
                "ipv4-addr--f4015ac5-77f3-47df-a697-07bec735bb15",
                "ipv4-addr--6e797715-a2ed-49c1-ba22-7dbdd2b0e7a9",
                "ipv4-addr--9c8ed2b1-2a1a-4a4d-961b-b0d448db3109",
                "ipv4-addr--0fe945fc-9748-4d21-9eb1-dcc009cdcb8d",
                "threat-actor--dc6ca068-de3c-5372-b9fb-4fdf345f917c"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.trendmicro.com/en_us/research/25/d/russian-infrastructure-north-korean-cybercrime.html"
                }
            ]
        }
    ]
}