{
    "type": "bundle",
    "id": "bundle--9a3e142c-b722-4210-9275-1c06d8080bc3",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--c98ec1c0-597d-435e-8d4b-07c44c4c45a5",
            "created": "2025-11-17T00:23:04.296806Z",
            "modified": "2025-11-17T00:23:04.296848Z",
            "name": "Bloo",
            "identity_class": "organization"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--d9718378-e591-4e62-bd36-aa07c2242b67",
            "value": "https://tracking-domain.com/request.php?i=ZW1haWxAZXhhbXBsZS5jb20=&c=campaign123&dot.png"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--958946a9-a366-4804-82e8-8adab0d3278c",
            "value": "https://tracking-domain.com/pixel.gif?i=base64encodeddata"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--0e60654e-e61f-4178-b025-57927d56c205",
            "value": "https://tracking-domain.com/pixel.gif?i=ZW1haWxAZXhhbXBsZS5jb20="
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--da6fde6b-7106-4ed4-b752-beee49fc0692",
            "value": "tracking-domain.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--31adb39d-a0df-42ad-be18-4eb3907a1a50",
            "value": "track.hubspot.com"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T19:54:18.646538Z",
            "modified": "2026-06-24T19:54:18.646538Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--78f40a12-f711-411e-884f-085686d312c3",
            "created_by_ref": "identity--c98ec1c0-597d-435e-8d4b-07c44c4c45a5",
            "created": "2026-06-24T19:54:18.649194Z",
            "modified": "2026-06-24T19:54:18.649194Z",
            "name": "Tracking The Trackers Lessons From The Apt43 Kimsuky Takedown",
            "published": "2025-11-07T00:00:00Z",
            "object_refs": [
                "identity--c98ec1c0-597d-435e-8d4b-07c44c4c45a5",
                "url--d9718378-e591-4e62-bd36-aa07c2242b67",
                "url--958946a9-a366-4804-82e8-8adab0d3278c",
                "url--0e60654e-e61f-4178-b025-57927d56c205",
                "domain-name--da6fde6b-7106-4ed4-b752-beee49fc0692",
                "domain-name--31adb39d-a0df-42ad-be18-4eb3907a1a50",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://bloo.io/blog/tracking-the-trackers-lessons-from-the-apt43-kimsuky-takedown"
                }
            ]
        }
    ]
}