{
    "type": "bundle",
    "id": "bundle--25791f69-f35e-42cd-b671-e95d57786a3a",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--76c07a76-c96e-40b6-b12f-2bc91a02d1b1",
            "created": "2023-03-31T23:26:14.440052Z",
            "modified": "2023-03-31T23:26:14.440102Z",
            "name": "Splunk",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--7bbf57a7-7525-420f-8f76-6cfcab5c1304",
            "value": "visualstudiofactory.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0e4151c7-e343-4b9e-be74-b0b7253bd2de",
            "value": "akamaitechcloudservices.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--1261a3e1-65b9-48fc-995e-87aa055fe362",
            "value": "msedgepackageinfo.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--da81accb-0ce4-4da3-8990-28fc71882569",
            "value": "msstorageazure.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c60b5916-fccb-4162-960f-84bc43606851",
            "value": "azureonlinestorage.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5312488a-0968-4892-be2b-0fdf9904d1a3",
            "value": "zacharryblogs.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c84f9e68-157d-4676-9d6c-c99bbd66b160",
            "value": "officestoragebox.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--dd084def-4e31-425a-a506-14ab670a4217",
            "value": "sourceslabs.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--8a5ae2ad-2984-42e1-9f92-6c6da70b7ff2",
            "value": "officeaddons.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--64bf44fb-e8c0-4489-91ee-1b825ed8a3a4",
            "value": "glcloudservice.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--b1fbc5f9-cac3-49fc-8e32-3a2c1ddb65db",
            "value": "azuredeploystore.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a48ec800-3909-4026-9391-567a8f5f7c84",
            "value": "pbxsources.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--76b49f68-671a-479e-a126-9cf5564ac27f",
            "value": "msstorageboxes.com"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d3ce8fb1-0b15-41ca-bace-1cb376a99851",
            "hashes": {
                "SHA-256": "c485674ee63ec8d4e8fde9800788175a8b02d3f9416d0e763360fff7f8eb4e02"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--8956602e-e553-47e1-a44d-93d4a536eef9",
            "hashes": {
                "SHA-256": "7986bbaee8940da11ce089383521ab420c443ab7b15ed42aed91fd31ce833896"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--136e6264-1772-453e-8357-230e72e1e6c0",
            "hashes": {
                "SHA-256": "11be1803e2e307b647a8a7e02d128335c448ff741bf06bf52b332e0bbf423b03"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--585e4f39-c375-4126-b3fc-372004c72118",
            "value": "https://azureonlinestorage.com/azure/storage"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7af4cf35-29b2-4539-9b57-78d5210c9c74",
            "value": "https://akamaitechcloudservices.com/v2/storage"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--7ad3962e-fc83-4b66-8801-22ebb8eb63ea",
            "value": "https://pbxsources.com/exchange"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--6be311f1-ce17-4120-9fc4-f4907923a47a",
            "value": "https://msstorageboxes.com/office"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e51201a2-46c8-4428-b4b1-d77e97205bad",
            "value": "https://msedgepackageinfo.com/microsoft-edge"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--ae01c12c-6f7a-40cd-bb82-6546ebbd1487",
            "value": "https://azuredeploystore.com/cloud/services"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--735025de-a0dc-4a10-9d10-701b0974a0a1",
            "value": "https://glcloudservice.com/v1/console"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--65268b0b-7d54-4c50-9982-383a9297b555",
            "value": "https://visualstudiofactory.com/workload"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--57fe67c6-c513-497c-9b9e-411e31cb0e0a",
            "value": "https://officeaddons.com/technologies"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--35831b2a-33d9-40f6-abce-66243d4614a1",
            "value": "https://sourceslabs.com/downloads"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--ef8db124-58b3-4ace-89da-42b56b2493c6",
            "value": "https://msstorageazure.com/window"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--5529bcad-0dd6-4c16-a4ce-27aa65a76133",
            "value": "https://officestoragebox.com/api/session"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ee20ff09-a6a1-42c1-a724-c4e5a59c208d",
            "hashes": {
                "SHA-256": "5c54932fdbb077d73c58ac41a1ad3f6ea5576b3e1f719c8b714b637c9ceb361b"
            }
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--491d46a2-8f93-44fb-82ea-ab4cb83edd49",
            "value": "https://zacharryblogs.com/feedhttps://pbxcloudeservices.com/phonesystem"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--9741740b-83c3-45e8-b212-3f8a670ac163",
            "created_by_ref": "identity--76c07a76-c96e-40b6-b12f-2bc91a02d1b1",
            "created": "2026-06-24T21:03:56.339653Z",
            "modified": "2026-06-24T21:03:56.339653Z",
            "name": "Splunk Insights: Investigating the 3CXDesktopApp Supply Chain Compromise",
            "published": "2023-03-31T00:00:00Z",
            "object_refs": [
                "identity--76c07a76-c96e-40b6-b12f-2bc91a02d1b1",
                "domain-name--7bbf57a7-7525-420f-8f76-6cfcab5c1304",
                "domain-name--0e4151c7-e343-4b9e-be74-b0b7253bd2de",
                "domain-name--1261a3e1-65b9-48fc-995e-87aa055fe362",
                "domain-name--da81accb-0ce4-4da3-8990-28fc71882569",
                "domain-name--c60b5916-fccb-4162-960f-84bc43606851",
                "domain-name--5312488a-0968-4892-be2b-0fdf9904d1a3",
                "domain-name--c84f9e68-157d-4676-9d6c-c99bbd66b160",
                "domain-name--dd084def-4e31-425a-a506-14ab670a4217",
                "domain-name--8a5ae2ad-2984-42e1-9f92-6c6da70b7ff2",
                "domain-name--64bf44fb-e8c0-4489-91ee-1b825ed8a3a4",
                "domain-name--b1fbc5f9-cac3-49fc-8e32-3a2c1ddb65db",
                "domain-name--a48ec800-3909-4026-9391-567a8f5f7c84",
                "domain-name--76b49f68-671a-479e-a126-9cf5564ac27f",
                "file--d3ce8fb1-0b15-41ca-bace-1cb376a99851",
                "file--8956602e-e553-47e1-a44d-93d4a536eef9",
                "file--136e6264-1772-453e-8357-230e72e1e6c0",
                "url--585e4f39-c375-4126-b3fc-372004c72118",
                "url--7af4cf35-29b2-4539-9b57-78d5210c9c74",
                "url--7ad3962e-fc83-4b66-8801-22ebb8eb63ea",
                "url--6be311f1-ce17-4120-9fc4-f4907923a47a",
                "url--e51201a2-46c8-4428-b4b1-d77e97205bad",
                "url--ae01c12c-6f7a-40cd-bb82-6546ebbd1487",
                "url--735025de-a0dc-4a10-9d10-701b0974a0a1",
                "url--65268b0b-7d54-4c50-9982-383a9297b555",
                "url--57fe67c6-c513-497c-9b9e-411e31cb0e0a",
                "url--35831b2a-33d9-40f6-abce-66243d4614a1",
                "url--ef8db124-58b3-4ace-89da-42b56b2493c6",
                "url--5529bcad-0dd6-4c16-a4ce-27aa65a76133",
                "file--ee20ff09-a6a1-42c1-a724-c4e5a59c208d",
                "url--491d46a2-8f93-44fb-82ea-ab4cb83edd49"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.splunk.com/en_us/blog/security/splunk-insights-investigating-the-3cxdesktopapp-supply-chain-compromise.html"
                }
            ]
        }
    ]
}