{
    "type": "bundle",
    "id": "bundle--8e67127c-49a1-497c-ac83-bad7c95220b8",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--c48c8182-30a2-4ef4-b0ce-54542b87ae11",
            "created": "2023-03-08T12:51:51.955089Z",
            "modified": "2024-11-20T11:35:16.572356Z",
            "name": "NTTSecurity",
            "identity_class": "organization"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-25T01:33:07.777085Z",
            "modified": "2026-06-25T01:33:07.777085Z",
            "name": "Kimsuky"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--4c934d09-fa90-5876-9872-8dfa3eed0ac2",
            "created": "2026-06-25T01:33:07.780738Z",
            "modified": "2026-06-25T01:33:07.780738Z",
            "name": "APT43"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--87181cd3-9d57-57c9-9e60-46a06a8d12ab",
            "created": "2026-06-25T01:33:07.786726Z",
            "modified": "2026-06-25T01:33:07.786726Z",
            "name": "DarkPlum"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--88a61e58-0fde-4790-84f9-feb5b196eaa6",
            "created_by_ref": "identity--c48c8182-30a2-4ef4-b0ce-54542b87ae11",
            "created": "2026-06-25T01:33:07.787684Z",
            "modified": "2026-06-25T01:33:07.787684Z",
            "name": "Unmasking DarkPlum: inside the operations of DPRK's elite cyber espionage group",
            "published": "2024-10-03T00:00:00Z",
            "object_refs": [
                "identity--c48c8182-30a2-4ef4-b0ce-54542b87ae11",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
                "threat-actor--4c934d09-fa90-5876-9872-8dfa3eed0ac2",
                "threat-actor--87181cd3-9d57-57c9-9e60-46a06a8d12ab"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.virusbulletin.com/conference/vb2024/abstracts/unmasking-darkplum-inside-operations-dprks-elite-cyber-espionage-group/"
                }
            ]
        }
    ]
}