{
    "type": "bundle",
    "id": "bundle--3edd8671-89ed-4e20-8f64-b7172e28492d",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--48edf75c-7cd8-480a-8950-deb15067ea29",
            "created": "2026-04-13T05:27:30.708162Z",
            "modified": "2026-04-22T01:03:40.519059Z",
            "name": "BreakGlassIntelligence",
            "identity_class": "organization"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--5b9db29b-a62c-4e7e-ac5f-46e657a72a3d",
            "value": "45.59.163.23"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--53fc5444-0aa7-474b-aa44-b3103779a307",
            "value": "95.216.37.186"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--8c189a20-6132-4589-80c2-2a67db864f30",
            "value": "https://nvidiasdk.fly.dev/nvs"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--5f19fe48-2547-4e4d-ba8b-484ea5168ef2",
            "value": "nvidiasdk.fly.dev"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--55e7a7b6-7d67-44ff-96be-a0e892ec7e3f",
            "value": "172.86.93.139"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--44dd15ba-6ee0-4932-859d-cce03bb77f20",
            "value": "95.164.17.24"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-25T00:00:09.195867Z",
            "modified": "2026-06-25T00:00:09.195867Z",
            "name": "Kimsuky"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--517f1d6a-514b-592b-8216-43a310ad6d08",
            "created": "2026-06-25T00:00:09.200049Z",
            "modified": "2026-06-25T00:00:09.200049Z",
            "name": "ContagiousInterview"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--620d127b-758c-43aa-bc60-d58b8073fa2d",
            "created_by_ref": "identity--48edf75c-7cd8-480a-8950-deb15067ea29",
            "created": "2026-06-25T00:00:09.205619Z",
            "modified": "2026-06-25T00:00:09.205619Z",
            "name": "Two IOCs In, Five C2 Servers Out: Mapping DPRK's Contagious Interview Campaign From InvisibleFerret to a Kimsuky Crossover",
            "published": "2026-04-01T00:00:00Z",
            "object_refs": [
                "identity--48edf75c-7cd8-480a-8950-deb15067ea29",
                "ipv4-addr--5b9db29b-a62c-4e7e-ac5f-46e657a72a3d",
                "ipv4-addr--53fc5444-0aa7-474b-aa44-b3103779a307",
                "url--8c189a20-6132-4589-80c2-2a67db864f30",
                "domain-name--5f19fe48-2547-4e4d-ba8b-484ea5168ef2",
                "ipv4-addr--55e7a7b6-7d67-44ff-96be-a0e892ec7e3f",
                "ipv4-addr--44dd15ba-6ee0-4932-859d-cce03bb77f20",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
                "threat-actor--517f1d6a-514b-592b-8216-43a310ad6d08"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://intel.breakglass.tech/post/invisibleferret-contagious-interview-dprk-lazarus-kimsuky-crossover"
                }
            ]
        }
    ]
}