{
    "type": "bundle",
    "id": "bundle--87c9813b-beef-44cb-a3e5-ed6203ab0cea",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--34169512-f2ce-469b-a77d-edd828ec47c5",
            "created": "2025-03-12T11:42:45.535681Z",
            "modified": "2025-03-12T11:47:45.158691Z",
            "name": "Lookout",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--9ccb11d7-7452-41a9-8578-7f9242df3807",
            "value": "buckso.ru"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--3f41e4d8-5e9c-4988-8947-0505edbff981",
            "value": "secure-qonto-pro.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--deabc830-7e56-414e-99c5-9cbcf70b4030",
            "value": "vasifgo.ru"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0bcb1097-2b52-4dd6-b527-b58e099cf99d",
            "value": "bashaardi.ru"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--cf137d16-c2ca-41c1-aa98-2a4c68ce9171",
            "value": "secure-bdf.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--9cef9003-a41a-4c3f-8e5e-2f89edda08c9",
            "value": "drowrang.ru"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--13eb2b3f-6bc7-482a-8055-b230abd13209",
            "value": "dsp2formulaire-bdf.net"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4e716a58-f7c7-4440-92ca-49030cc7edaf",
            "value": "molotiras.ru"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--6871518c-4756-4723-8e44-3de18ea354c8",
            "value": "milashto.ru"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--0ed52b50-cd2f-41a1-a3a8-9ddf35b6bc8d",
            "value": "loperto.ru"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--855dd8fb-f178-4190-b96f-3c00e5536304",
            "value": "hitrovana.ru"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--c9641405-0dad-460a-b292-634ceab95624",
            "value": "baloglandi.ru"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--e24bdde1-a3d9-42d6-8c1b-5af883577f85",
            "value": "detroito.ru"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--531d6837-e95c-4684-a03a-05a649539dc5",
            "value": "llkeyvost.ddns.net"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--bd32b6f6-7bc3-4b67-b36d-3428b0bc5063",
            "value": "47.112.137.199"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--4650737f-185b-4445-98c3-bb139823ab7e",
            "value": "89.185.84.81"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-06-24T17:30:11.974503Z",
            "modified": "2026-06-24T17:30:11.974503Z",
            "name": "Kimsuky"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--c571cecc-393e-500e-9d4a-28c0b8dec018",
            "created": "2026-06-24T17:30:11.976852Z",
            "modified": "2026-06-24T17:30:11.976852Z",
            "name": "Scarcruft"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--098435a6-7d55-4811-8b32-12e378d2271e",
            "created_by_ref": "identity--34169512-f2ce-469b-a77d-edd828ec47c5",
            "created": "2026-06-24T17:30:11.982111Z",
            "modified": "2026-06-24T17:30:11.982111Z",
            "name": "Unmasking State-Sponsored Mobile Surveillance Malware from Russia, China, and North Korea",
            "published": "2024-12-11T00:00:00Z",
            "object_refs": [
                "identity--34169512-f2ce-469b-a77d-edd828ec47c5",
                "domain-name--9ccb11d7-7452-41a9-8578-7f9242df3807",
                "domain-name--3f41e4d8-5e9c-4988-8947-0505edbff981",
                "domain-name--deabc830-7e56-414e-99c5-9cbcf70b4030",
                "domain-name--0bcb1097-2b52-4dd6-b527-b58e099cf99d",
                "domain-name--cf137d16-c2ca-41c1-aa98-2a4c68ce9171",
                "domain-name--9cef9003-a41a-4c3f-8e5e-2f89edda08c9",
                "domain-name--13eb2b3f-6bc7-482a-8055-b230abd13209",
                "domain-name--4e716a58-f7c7-4440-92ca-49030cc7edaf",
                "domain-name--6871518c-4756-4723-8e44-3de18ea354c8",
                "domain-name--0ed52b50-cd2f-41a1-a3a8-9ddf35b6bc8d",
                "domain-name--855dd8fb-f178-4190-b96f-3c00e5536304",
                "domain-name--c9641405-0dad-460a-b292-634ceab95624",
                "domain-name--e24bdde1-a3d9-42d6-8c1b-5af883577f85",
                "domain-name--531d6837-e95c-4684-a03a-05a649539dc5",
                "ipv4-addr--bd32b6f6-7bc3-4b67-b36d-3428b0bc5063",
                "ipv4-addr--4650737f-185b-4445-98c3-bb139823ab7e",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
                "threat-actor--c571cecc-393e-500e-9d4a-28c0b8dec018"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://i.blackhat.com/EU-24/Presentations/EU-24-V2-Islamoglu-Unmasking-State-Sponsored-Mobile-Surveillance.pdf"
                }
            ]
        }
    ]
}