{
  "name": "TA416 resumes European government espionage campaigns",
  "slug": "ta416-resumes-european-government-espionage-campaigns",
  "description": "Since mid-2025, China-aligned threat actor TA416 has resumed targeting European government and diplomatic organizations after a two-year operational shift to Southeast Asia. The campaigns primarily focused on diplomatic missions to the EU and NATO, using web bug reconnaissance and malware delivery through compromised accounts and attacker-controlled infrastructure. In March 2026, TA416 expanded operations to Middle Eastern diplomatic entities following the Iran conflict outbreak. Throughout this period, the actor continuously evolved infection chains, utilizing fake Cloudflare Turnstile pages, OAuth redirect abuse, and C# project files to deliver a customized PlugX backdoor via DLL sideloading. The group employed both broad reconnaissance campaigns and targeted malware delivery, demonstrating sophisticated tradecraft including use of re-registered legitimate domains and cloud infrastructure for command and control operations.",
  "published": "2026-04-07T11:11:35.434000+00:00",
  "created_at": "2026-04-07T11:26:30.487000+00:00",
  "modified_at": "2026-04-07T09:26:30+00:00",
  "created_at_opencti": "2026-04-07T11:26:30.487000+00:00",
  "author": "AlienVault",
  "confidence": 100,
  "report_types": [
    "threat-report"
  ],
  "labels": [
    "cloudflare turnstile",
    "korplug",
    "plugx",
    "ta416",
    "toneshell"
  ],
  "tags": [
    "2026-04-07",
    "cloudflare turnstile",
    "korplug",
    "plugx",
    "ta416",
    "toneshell"
  ],
  "related_entities": {
    "indicators": [
      {
        "id": "9bb27973-e3b7-41c3-b46c-22f128e50f6c",
        "name": "www.subusiness.org"
      },
      {
        "id": "67517653-3a68-4f4c-a5d7-ba6148172043",
        "name": "softhunts.com"
      },
      {
        "id": "8738bee1-ee06-4506-bdfb-fa6ec6773af6",
        "name": "thecamco.net"
      },
      {
        "id": "bbef7a85-7f4b-438b-bd44-3cbac7eb9433",
        "name": "loumuenz.com"
      },
      {
        "id": "e27994cd-e386-4336-bd09-6b26bc254299",
        "name": "8c0051a83b3611ff2b669b670aa005633f3d9e844454a112b31d2a4bc944a234"
      },
      {
        "id": "77828d5d-306a-4139-8f87-e9a2bde47f61",
        "name": "16e258b7b712b747a6037d56ee8d2cc99f8f8139da4a3a59c24af0887531ace0"
      },
      {
        "id": "d2c61e08-8622-400a-9d37-924d982f187c",
        "name": "harrietmwelch.com"
      },
      {
        "id": "e0a59810-40e4-453b-b257-07f2712d612f",
        "name": "it-evenement.nl"
      },
      {
        "id": "66d2baa9-34a1-42f8-852f-74e1f2208dc4",
        "name": "e31eafb49dbcad079ff177703b5a033f3e0365991cf28492339eccfe0fdf812c"
      },
      {
        "id": "5a2868ca-a5e7-41cd-86bb-9bbb224ae6ab",
        "name": "c8a6302adf92353556c600a0afa9146fbc04663fffe8be90808df2bf04ec5703"
      },
      {
        "id": "2d394844-6a86-481c-bd02-ffefb6ecd9ee",
        "name": "d0576b39bb6c05ea0a24d3a3d5d7cb234454fefc65860f21a97757582adc7650"
      },
      {
        "id": "0c9b4f15-1ae8-42a6-bd84-00d9e740dd54",
        "name": "0b916d2b4a02d01b42c2b04e281d786a05cc7974d2c4a272b01e8060fa713403"
      },
      {
        "id": "68577467-05e5-487b-a4d1-ac89faef2db8",
        "name": "speedifynews.com"
      },
      {
        "id": "b52f9653-e217-4387-81f5-50cef43f8317",
        "name": "www.bushidomma.net"
      },
      {
        "id": "8fcce7eb-ec05-46c5-b757-f63c35c18b6a",
        "name": "28a8bdaee803d9cf9186ff4756e15b0fb491fd3b65bde002361615f27e5ca92d"
      },
      {
        "id": "c0fedf58-34ae-4912-859a-a7e74a3bfce4",
        "name": "c73050860c8aaa0f79c03781519cdcee133832805e2e3e778fef3cb0e917efb1"
      },
      {
        "id": "f6089f3a-77a8-42d8-a373-08df125a015c",
        "name": "dalerocks.com"
      },
      {
        "id": "de6a3b84-a58b-4024-af9e-adfb65e5902f",
        "name": "fruitbrat.com"
      },
      {
        "id": "a61b7b82-0275-42db-8768-6aa66adc5a7c",
        "name": "de8ddc2451fb1305d76ab20661725d11c77625aeeaa1447faf3fbf56706c87f1"
      },
      {
        "id": "33be46a9-efdc-491f-890a-3f3b008168b5",
        "name": "e79d19d68d307c12413f8549aafa4a56776002dd04601e36e0125b2e6d56ff94"
      },
      {
        "id": "c67c3862-a20d-4665-99c7-c7e9776347b6",
        "name": "bushidomma.net"
      },
      {
        "id": "326fea08-17cd-4122-b1ca-f1dcd7f78921",
        "name": "965894996e2cb9be1e0ccc509e079e7eca072cbc4e68945beb00ff5979dda19c"
      },
      {
        "id": "756cf94d-46b7-4a70-9b19-b0c9042317b5",
        "name": "b394e7a3b350b2104b73e29a04e48e5ede5078b9a811abae58d842ce3442c6b3"
      },
      {
        "id": "41c3152a-d30e-409b-a348-139e5cd6be5e",
        "name": "3c065947461df428b0d29e401e2a28a0d2560943e96d3ac8b9ed71858fbcec38"
      },
      {
        "id": "d179da97-0e54-4dc5-a337-a4110f65c6da",
        "name": "ecoafrique.net"
      },
      {
        "id": "004e68dc-0462-40a5-b7b3-50c34832abbd",
        "name": "e7ed0cd4115f3ff35c38d36cc50c6a13eba2d845554439a36108789cd1e05b17"
      },
      {
        "id": "2e144b0b-06e4-4114-bfef-a656781d65b1",
        "name": "coastallasercompany.com"
      },
      {
        "id": "cc1e57d9-e1ca-4f05-87bb-305d52308393",
        "name": "hnk-capljina.com"
      },
      {
        "id": "6e16fd2f-9c75-4d55-b126-943d6f97b87d",
        "name": "30475ff5b32776e554433ff00e7c18590253521024662c267abaefd24f1b9bbe"
      },
      {
        "id": "f903c5a1-7f6b-4f63-a243-eb780e907e83",
        "name": "shalomrav.org"
      },
      {
        "id": "c3bae759-4f16-456a-adf8-27517d725e64",
        "name": "784a914bd1878ad68a6cf3f693da5ddcc2f04b794204333098ad749b7e372fd4"
      },
      {
        "id": "97b7d1ef-1493-4bda-926b-ec1555310561",
        "name": "ytsonline.net"
      },
      {
        "id": "97b69e4e-bf5b-4774-b70d-b4f895f1231f",
        "name": "https://www.bushidomma.net/download/l7o9afe?error=interaction_required&error_description=session+information+is+not+sufficient+for+single-sign-on.&state=2"
      },
      {
        "id": "7ebe3b6e-169b-43dc-8b6d-1ba0248c838a",
        "name": "doorforum.com"
      },
      {
        "id": "9053364e-4a69-4e97-bfc9-d3e4371cc3ab",
        "name": "87929c8f53341a5e413950d33c7946c64e1d4b2eba6d1a8b2d08ef56f7065052"
      },
      {
        "id": "ed5e9113-dddb-4ac7-9e3c-fd484e98b8fb",
        "name": "welnetsanda.org"
      },
      {
        "id": "d1e7733a-6279-4339-9f96-4064f72187a0",
        "name": "cnrelojes.com"
      },
      {
        "id": "7cb41142-6d53-4eff-b949-fdb3bbae1c02",
        "name": "dash.ghonline.net"
      },
      {
        "id": "aec1d38a-3de8-4e8a-a073-19e74a8ae760",
        "name": "64bae6a215ad9e956d1028603438228003d832bdd5e586ad4988f5c7ad1c54f0"
      },
      {
        "id": "85b31a93-c174-435a-950a-8e88f318deee",
        "name": "6788365386ccd34d1db681c61ef07ef4d2faea5672571b77a76dc48f327afaa9"
      },
      {
        "id": "3bb4944f-f2d2-4622-8f0e-c02c00f48fec",
        "name": "famisu.com"
      },
      {
        "id": "5c7288b7-ae31-425d-aa6f-222e120d1e50",
        "name": "c96338533d0ab4de8201ce1f793e9ea18d30c6179daf1e312e0f01aff8f50415"
      },
      {
        "id": "80e484a6-ffee-4404-aace-1eabd64ea722",
        "name": "gynecocuk.net"
      },
      {
        "id": "838207ee-55b2-4a07-a66f-fd1dc37dd143",
        "name": "53086e3b557a1d21cf7f4ffc73d92c39b08872334a8cdb09dda0a06bd060cfe9"
      },
      {
        "id": "681068ff-4581-4cd5-9c9d-a5fca8452139",
        "name": "stuypa.org"
      },
      {
        "id": "ad053ed1-8b2d-42da-bb59-af3ca211a0c7",
        "name": "69b685fadce4f34bc4964b3d78d43694a428ae1ee4d2fe0ce4ed26fad07847fa"
      },
      {
        "id": "ace6af83-ae57-459e-a70a-9d62064bfdd6",
        "name": "36e516182b4c8aa48ea3e50b7dc353f32d3412f59fb0cb1c7b3590aa4d821c57"
      },
      {
        "id": "f4616bcb-43ae-41c8-9e8a-a0b0736796b3",
        "name": "rhonline.net"
      },
      {
        "id": "0403f34e-c96f-4e2d-9adb-961d61485755",
        "name": "56f0247049be8b9dc1da7c55957d2fb4f7177965ba62789c512f3e2b4c0c5c26"
      },
      {
        "id": "bdffb5c1-ee3f-4c6c-93fb-cbbed3dd1602",
        "name": "a95e3857e2f32c2a9c23accadebc1ad6aabf73fed9d63c792d69122d9ec6726d"
      },
      {
        "id": "00fc272a-d59f-4592-879a-9c8e4988c73b",
        "name": "busopps.org"
      },
      {
        "id": "593eed5c-444c-4679-9249-939d75585ef6",
        "name": "bobbush.org"
      },
      {
        "id": "2cb542ce-5be7-41af-b453-2e22edb70af1",
        "name": "portabalbufe.com"
      },
      {
        "id": "bfb61a86-2ee7-4149-a5bb-5e5dc9e6444d",
        "name": "web.florarevival.com"
      },
      {
        "id": "bc606955-987c-4e00-b1db-f44fb7fdb344",
        "name": "nvofficespace.com"
      },
      {
        "id": "a34a2bf9-b8d6-4b02-97c2-27e902e539b0",
        "name": "c5267fefaac1764eba5f42681eb216f146b7d18fcbf546275d33e70cb36fdfba"
      },
      {
        "id": "1089f205-2ed8-42e8-ba8c-3e51ab977ce3",
        "name": "42c3b9cad6c8383699eba4f82d51908c0d61e9ea454bc40447cf20475ce20ff0"
      },
      {
        "id": "e0302f9f-f828-445e-9a91-d2f1fa958f8b",
        "name": "262a1003a2cd04993b29e687686eba573d6202fea8611c437ecbd6312802677a"
      },
      {
        "id": "e2e4d57f-80bd-41f4-bacd-61d2e6f2cd1e",
        "name": "44cfba85aa27265779b01f6eb8b69718462b1ca8078b21066061e8d1622dff7a"
      },
      {
        "id": "c0afa912-6686-47c9-8968-94e44c185b5c",
        "name": "alpinemfg.net"
      },
      {
        "id": "8ece62a0-7673-4c36-8ee4-35d3758501ee",
        "name": "buddhismnewsdaily.org"
      },
      {
        "id": "017d2c0a-f150-472c-a1b6-6451ff9dae2c",
        "name": "ronnybush.net"
      },
      {
        "id": "b117e385-bfa3-4ee8-b761-6b795f540f67",
        "name": "amblecote.net"
      },
      {
        "id": "0375fcdd-71b9-423b-8590-d3735fab1e32",
        "name": "06a70c54c580ec4c362bfbc94147a0f1ac9020c421933ccf494a8d553b114260"
      },
      {
        "id": "5303c5c0-74fb-4663-87e0-600d24ac90ab",
        "name": "www.buscacnpj.org"
      },
      {
        "id": "55300ecd-8beb-4a44-a6a8-34eb9a3e1c68",
        "name": "a82c8845587a87010eab52ef8c35d45eaea8eb8102aae77ec96e222197b7db66"
      },
      {
        "id": "62050adf-b0db-4275-8cb6-2d0345d2d5bf",
        "name": "buzzurro.net"
      },
      {
        "id": "fd33cd7d-d502-4d65-a043-ce6bf9dbbe78",
        "name": "designehair.com"
      },
      {
        "id": "f288acac-1ddd-43ea-a13f-c643c56d9f28",
        "name": "29a70241660ff3234f1c5e8c01878ee01adb4a289262bd37403e1a323129ea86"
      },
      {
        "id": "234765d9-5613-4643-b8f6-7ca3d21fb097",
        "name": "florarevival.com"
      },
      {
        "id": "b4d337ff-4525-4d65-9864-77a375bee406",
        "name": "795ad4789a185c3abc35b3ad82117db6b60a7b8ab857e41080873f070d4a06f0"
      },
      {
        "id": "1426b434-aed8-40ee-8aac-d4bb6f240e39",
        "name": "774841a2bfb07b61a8be3de8ae31e9847f987de652eef179761dc3d1b34c42ff"
      },
      {
        "id": "25c96eb2-f697-4879-ad11-45cb19e2eb43",
        "name": "45d8d4f04eb44dc5d10290038825194b0ffc38048a786b4a8b81bb796afc58a3"
      },
      {
        "id": "61f00a32-653b-4098-8efe-543ba1263bf9",
        "name": "9d61c4e21bbbddde5bb780ea0c5238a3538a84b9afe98d62d08845b47fb5caa9"
      },
      {
        "id": "cbb583e7-3e3b-4369-ab49-271e314ff67f",
        "name": "adimagemarketing.com"
      },
      {
        "id": "8933e5b1-0185-4ec4-8a98-81ed9bf583c0",
        "name": "colorflee.org"
      },
      {
        "id": "a523db69-94b2-4e7a-a706-4880016c852e",
        "name": "e9d8f28fd0aef3bc3f5b28a41b3f342165b371db9aefd7d03f2aba4292009d3e"
      },
      {
        "id": "7e7147d4-5844-40ff-bbec-2db9ffa14727",
        "name": "3e7478d3854eaeed487230ba9299c87d5a5d70e4fbeac841555327c76b7b405e"
      },
      {
        "id": "c38fc2a3-15d0-4284-b721-99fa72c9e36b",
        "name": "de13e4b4368fbe8030622f747aed107d5f6c5fec6e11c31060821a12ed2d6ccd"
      },
      {
        "id": "1dd46949-dced-4ad3-b2f6-60b1e46da98f",
        "name": "4ed76fa68ef9e1a7705a849d47b3d9dcdf969e332bd5bcb68138579c288a16d3"
      },
      {
        "id": "d4d25da5-3aab-4b4d-bdfb-d13df1e1d02a",
        "name": "https://welnetsanda.org/images/upload/logo.png/"
      },
      {
        "id": "b4b4eb4e-5e34-40ed-8343-856b4d4cd158",
        "name": "b6d866054dedf7a882dd1fa405a066de1278e35acf639b3a0e850a637d27c4bc"
      },
      {
        "id": "9d0a0156-4b37-4f43-952e-55e3eb4f51a9",
        "name": "2261c7640fe2f3c2385de61c546b5020ec8a486ad5bad64c31bc9268f6b36a2c"
      },
      {
        "id": "a8ded9d5-a007-4642-a374-b47b4b0f9794",
        "name": "winesnmore.net"
      },
      {
        "id": "1d252e33-53a6-44b5-ae9e-105056722a74",
        "name": "cseconline.org"
      },
      {
        "id": "7222a5e7-393f-4fdb-a768-7ab162c5cd70",
        "name": "https://www.buscacnpj.org/download/we7823bn?error=interaction_required&error_description=session+information+is+not+sufficient+for+single-sign-on.&state=3"
      },
      {
        "id": "2e809bf2-7d4c-4a33-b2fd-bb3eef8df277",
        "name": "gestationsdiabetes.com"
      },
      {
        "id": "5d9fce95-a019-420d-9745-9787c1374455",
        "name": "dnzapping.com"
      },
      {
        "id": "6342c3a3-6c43-46b6-9cf9-abeb7fb81878",
        "name": "gesecole.net"
      },
      {
        "id": "69ad0cf8-7ff6-429b-857a-2bca08b88c18",
        "name": "8421e7995778faf1f2a902fb2c51d85ae39481f443b7b3186068d5c33c472d99"
      },
      {
        "id": "cfa852aa-0f51-446f-90ec-5c5ab17efc7f",
        "name": "cubukluescort.com"
      },
      {
        "id": "3855c301-cf30-4401-90e8-b4f4cdb46d66",
        "name": "meritsoftwebportals.com"
      },
      {
        "id": "6a6649a8-1102-4cfb-a535-31e29c2df4ae",
        "name": "bcd30f2116f5ba6731c628483d597b2ba3620ed464c63875855906306beb102a"
      },
      {
        "id": "207f538f-e5f1-4305-9039-bb3cab90e95c",
        "name": "mongolianews.info"
      },
      {
        "id": "b982ba56-d780-41c6-833b-cbe368a30c25",
        "name": "e036e2ba402d808adbb7982ec8d7a207849ff40456633b2b372bc7916d9dc22f"
      },
      {
        "id": "e900a2c1-ea17-48fe-a8d0-5e0835e634fa",
        "name": "embwishes.com"
      },
      {
        "id": "45b64ff6-c3ca-4740-b8b0-c92c2d271e98",
        "name": "majicbus.org"
      },
      {
        "id": "5589ff36-d9fc-4b72-a83f-c79a60fff659",
        "name": "fuyuju.com"
      },
      {
        "id": "5f55020f-6482-4825-98ac-4bfdd73a6466",
        "name": "rondabusco.com"
      },
      {
        "id": "6c25bbd5-8731-4279-a38f-051afc3bc25d",
        "name": "buscacnpj.org"
      },
      {
        "id": "5f69e6bb-a5fa-4344-b3b0-e6cacedc6aee",
        "name": "bc8b022c10bcab39da302446b0a50988de94607c7e724f2051578e8ed2f8bbe7"
      },
      {
        "id": "af9d6c9e-ad00-4ff4-a313-11307bc84372",
        "name": "devredin.com"
      },
      {
        "id": "4e9594fd-4757-4269-beab-ce6c9f4f99cb",
        "name": "hayabusamt.com"
      },
      {
        "id": "7169b793-823b-46d7-93de-93407c592662",
        "name": "6b363e0f16fc5a612bd98631e7cdc4f68a95329e92c21ef0495c9117b8b8f360"
      },
      {
        "id": "2aaa1d5a-8de9-4508-bc8d-ff699c4db484",
        "name": "5c3208c5217933e16c5119e7baf78f85fd409e8822d1cd7a8ef2d52a5bd511c1"
      },
      {
        "id": "0b64f4fc-ebb7-4f29-bfd8-6728c71bc65e",
        "name": "7be77e6166aae9a89b16b64b593f35afc7424926047635f2230a4e364c6a46d8"
      },
      {
        "id": "f267ab29-8e77-4cab-81c0-26237bfe2fa6",
        "name": "84d6a8b47edadf5725d9937d8928a90d190e0c98b5b4d1a4c58e97cddcd36768"
      },
      {
        "id": "93344f19-2472-43a7-80e7-651a6f8570fc",
        "name": "http://ombut.com:443"
      },
      {
        "id": "2db60259-ba37-4c52-ac16-efb23c465739",
        "name": "f988d58e4a32b908ff7a557d740c6860c59807832c7626774330dcaed65ead14"
      },
      {
        "id": "ae73c85b-6db6-4778-b1fc-7243bf75edbe",
        "name": "29cd44aa2a51a200d82cca578d97dc13241bc906ea6a33b132c6ca567dc8f3ad"
      },
      {
        "id": "f81c1581-f641-441a-9c03-cd0f4137940f",
        "name": "3021f4d365a641722748c5e60d983a080db17bef8f0a1dbe624ffe63cd544cc1"
      },
      {
        "id": "86901996-169d-45c4-8985-c6e9939989fe",
        "name": "https://www.foxmediagency.com/download/qqa36sa0d6fq066?error=interaction_required&error_description=Session+information+is+not+sufficient+for+single-sign-on.&state=o1"
      },
      {
        "id": "6745c770-db63-4559-a821-1d92efa828cb",
        "name": "https://dash.ghonline.net:443/download/jyebbtg?error=interaction_required&error_description=Session+information+is+not+sufficient+for+single-sign-on.&state=o1"
      },
      {
        "id": "9773fcc6-8871-4bb3-8bf4-732020d7fd20",
        "name": "ae8d2cef8eac099f892e37cc50825d329459baa9625b71fb6f4b7e8f33c6ccce"
      },
      {
        "id": "f6a6f0f9-513e-4a1d-bb27-9a68e37d55af",
        "name": "napasbdc.org"
      },
      {
        "id": "42a7b33a-06a8-4df8-a684-9bdb8d837d67",
        "name": "a3f9e20315663e4e8feb13e77563e3cb0f2f4844734987e51e14bd172b9a04fd"
      },
      {
        "id": "e3ff1c90-63f4-48a9-9745-c676ec322d05",
        "name": "hoplitellc.com"
      },
      {
        "id": "dd295eb5-bd5c-4dea-b44a-0c70f5cbdf20",
        "name": "46314092c8d00ab93cbbdc824b9fc39dec9303169163b9625bae3b1717d70ebc"
      },
      {
        "id": "4806127d-fdce-45cf-bc8e-c6427ef3b6f3",
        "name": "epc.copenhagen2025.dm"
      },
      {
        "id": "eda16a09-9631-45f7-b360-e2937ae9ffc1",
        "name": "7c96d08f5ce46d1a857184490a7e68ca2b02e9cbe9d188742f184f21bc9c62d9"
      },
      {
        "id": "e3a99751-9a27-4dda-b7c0-3306a822d660",
        "name": "espacebus.com"
      },
      {
        "id": "91f80a0e-4cad-4d7e-806d-df6a423ef237",
        "name": "e1e597852d684bd6d0395d5094e58831f13635f668e7cf66ba71b8b66be0ce6c"
      },
      {
        "id": "bb7bdc13-4d9d-498d-87b9-481907c3eb8c",
        "name": "carhirechicago.com"
      },
      {
        "id": "e0991d98-ffd9-410c-a9e0-c5d65c983a88",
        "name": "9e67f72bfbc8772ce10633430e1277fd8374e99877ddedb598b4f6717c799eeb"
      },
      {
        "id": "61fe83dc-90df-44b0-86f0-ca7944a830d8",
        "name": "aaitile.com"
      },
      {
        "id": "1f9b5914-4cf2-4bb4-b3ff-c4946b71709b",
        "name": "theprmummy.com"
      },
      {
        "id": "d95f728d-0361-47d8-9c72-13ae781dfab0",
        "name": "b1606ca49aa15eadb039f33d438697973b203693d0003e467e1f33b36d10a530"
      },
      {
        "id": "81f635ac-a63a-468c-8841-30977f3d170d",
        "name": "ghonline.net"
      },
      {
        "id": "8c7623b1-af36-4dab-8b2e-37c080bddb65",
        "name": "decoraat.net"
      },
      {
        "id": "0f6157a5-e5bf-4642-89ed-494071e1a177",
        "name": "ombut.com"
      },
      {
        "id": "83c8939f-f7ec-4c16-b85d-16bfce954296",
        "name": "2712f4ac5ad422bcf749699389cb1a0111a1b11e298efb0cffebc2e2f0becb5f"
      },
      {
        "id": "28b5ad4c-d3f8-4247-af9a-f65ea5f95ea3",
        "name": "https://phpthemes.net/images/upload/eu.png/"
      },
      {
        "id": "b67beec6-9db5-4289-a7ea-b231695a8d38",
        "name": "paquimetro.net"
      },
      {
        "id": "193c3b40-05c6-48d8-87c2-8f12b13eed87",
        "name": "f333bc5238e39790fb7560de067a852e9a99df2bb783cf08738d8a0d424b9658"
      },
      {
        "id": "656e81b2-01f0-413c-8b00-a4844de0a191",
        "name": "subusiness.org"
      },
      {
        "id": "d4fb6a13-ca66-4b32-b095-780eb996b947",
        "name": "turileco.net"
      },
      {
        "id": "40ad42b8-1ea6-4804-bc26-0baf37166ef3",
        "name": "atravelingwitch.com"
      },
      {
        "id": "373d095b-8b4a-4a0e-bff1-11a37f92fbc0",
        "name": "1df74ce45aa9320c48858eddce3f46f5687fbfdcfd497d92a1e17476e7a2951e"
      },
      {
        "id": "14c0ee2c-aabb-4a77-b921-9a3d91a946df",
        "name": "2c3708a103b257fa75fcb34948c817fd564d4479f1e267b33c5b08f0d4c7634f"
      },
      {
        "id": "e4b414eb-431d-4f7a-b380-5ecb72748c99",
        "name": "30c71d644bc72e0d55d46bed753ab3f72dc77b7f1be0e34693c957939a779507"
      },
      {
        "id": "719a359a-aa3b-4f4b-91ac-6cadc62f1208",
        "name": "premegalithic.com"
      },
      {
        "id": "05145438-248b-4484-88e0-54c795b3a8d1",
        "name": "https://phpthemes.net/images/upload/"
      },
      {
        "id": "c0099e78-90a5-40c1-b096-f0875c86b556",
        "name": "supplementsoftheyear.com"
      },
      {
        "id": "40ddf0c2-ea73-4a40-8a66-2c7b085606b5",
        "name": "phbusiness.net"
      },
      {
        "id": "93169ebb-95bf-4b14-9d52-2449766c9a4c",
        "name": "foxmediagency.com"
      },
      {
        "id": "29d0e02c-de50-4465-bb46-5e52f5a10846",
        "name": "4d528842c7fe73681dfe569d38a39f8d38ca5548dbc8b6ac02df096713a92efd"
      },
      {
        "id": "7c92c350-3d6f-455f-a3c2-c09ef36899c8",
        "name": "racineupci.org"
      },
      {
        "id": "48df078e-d375-4746-8a1b-6796148b0ce5",
        "name": "devlyrics.com"
      },
      {
        "id": "ed48d518-f0aa-4bb2-8d2e-4c7fa2178213",
        "name": "ecolnomy.com"
      },
      {
        "id": "7d43d1b4-b282-4c86-ae79-7f44066960c9",
        "name": "mettayoga.org"
      },
      {
        "id": "33cd92bb-32e4-4ac5-a68c-cccbb23753d3",
        "name": "papermoonweddings.com"
      },
      {
        "id": "84b739f0-d95a-43e1-93f1-d4a4e7586bf1",
        "name": "7d2b6c48cbd6cef05ea2bdae7dfc001504cccda99dd89eb7fe6646e96c1d5515"
      },
      {
        "id": "93f580e4-2fee-461b-bbd3-b78a521eba89",
        "name": "anbusivam.com"
      },
      {
        "id": "b0962a84-7b1a-4c0b-b942-b56d874ee45d",
        "name": "https://web.florarevival.com:443/download/a6d6u9ff13?error=interaction_required&error_description=session+information+is+not+sufficient+for+single-sign-on.&state=6"
      },
      {
        "id": "f44ab211-7742-44d2-8772-1e81deccf053",
        "name": "50746ddd81a5dbc5cec793209ab552125fff9c7184aa5bcfe22d6c3b267f67f1"
      },
      {
        "id": "49ad95c5-82ef-4d2f-8f23-f82106be903d",
        "name": "creatday.com"
      },
      {
        "id": "65fc4d74-7a34-406d-b318-7f1ef9c69621",
        "name": "eb10443a2f0b9a25d01a84426a6a8532b0e7c9157abda55b94c98a1fd2d45562"
      },
      {
        "id": "b83937fd-44cb-43c3-a2e5-234cf57433bb",
        "name": "843b22df66f87a587be77145da163f9615fe8164a5ea17f9e33562ff43894fbf"
      },
      {
        "id": "2d1ebb5c-ab87-456c-9114-81b322cba3f9",
        "name": "basecampbox.com"
      },
      {
        "id": "7ad0e6df-7fe0-4eee-b286-a6fef78042d4",
        "name": "79e0ab17e761a00ad12b9848f1f07b507f57db532fa2df8c722693e14feb17c3"
      },
      {
        "id": "78c80473-fe6a-4dee-ad13-7ac64e15c283",
        "name": "goodmedsx.com"
      },
      {
        "id": "fec64bfc-c9a7-43d7-a194-0122f76d082b",
        "name": "ecomputers.org"
      },
      {
        "id": "9a1e8a60-c0c9-4f96-9288-a3f8c5414a7f",
        "name": "phpthemes.net"
      },
      {
        "id": "87ed74b0-485e-4592-8b96-d34283a62676",
        "name": "31f3606433e95bfbb047d31c885e56a70111e130f3d2da0580644c01323b46d1"
      },
      {
        "id": "0f1119c0-d943-407d-98a6-9db2434d189d",
        "name": "https://www.subusiness.org/download/aetce17ge?error=interaction_required&error_description=session+information+is+not+sufficient+for+single-sign-on.&state=47"
      },
      {
        "id": "9ff2c1d2-a6e5-446d-8d8f-017a2f485e67",
        "name": "buywownow.com"
      },
      {
        "id": "02bfed7a-0c43-486f-bd69-d51aea0b0fd2",
        "name": "www.foxmediagency.com"
      },
      {
        "id": "3f716fd2-a737-42a7-a1a9-b2d1aa5383ca",
        "name": "93e9402af72b355554f9ba93c64871b1bae5be498e3b8a10e61ebdd10ab0d050"
      }
    ],
    "intrusion_sets": [
      {
        "id": "d84a7548-8d06-45c7-80bf-46911d6e40c0",
        "name": "MUSTANG PANDA",
        "slug": "mustang-panda"
      },
      {
        "id": "legacy:intrusion:cd08161dd95e3d52",
        "name": "TA416",
        "slug": "ta416"
      }
    ],
    "malware": [
      {
        "id": "352e6df6-6314-495d-8179-0282ddd47926",
        "name": "Korplug",
        "slug": "korplug"
      },
      {
        "id": "cf1dee12-ef5b-4ae4-80e0-beb94db419f0",
        "name": "ToneShell",
        "slug": "toneshell"
      },
      {
        "id": "9e518ffc-0367-4828-aa11-41b852504b89",
        "name": "PlugX - S0013",
        "slug": "plugx-s0013"
      },
      {
        "id": "7a571b96-5dc3-41a6-afc7-3ee9d85b0221",
        "name": "PUBLOAD",
        "slug": "pubload"
      },
      {
        "id": "legacy:malware:25f758cea1cec1c5",
        "name": "DestroyRAT",
        "slug": "destroyrat"
      }
    ],
    "observables": [
      {
        "id": "21f76db6-91e1-4341-8b40-aa1b65a8d011",
        "name": "devredin.com"
      },
      {
        "id": "e02a91a6-ae24-45f1-8c74-90ec9f968d67",
        "name": "creatday.com"
      },
      {
        "id": "47cf86b9-fdef-46de-b546-28276fb2dd03",
        "name": "buscacnpj.org"
      },
      {
        "id": "7c0228d9-c011-4ebd-90d2-be887fa767aa",
        "name": "alpinemfg.net"
      },
      {
        "id": "59e73112-8ede-4b4d-8461-5bd3d2f8167b",
        "name": "buddhismnewsdaily.org"
      },
      {
        "id": "79757dce-6133-454a-8a4a-2da43fb1186d",
        "name": "speedifynews.com"
      },
      {
        "id": "de7f6bae-94e3-42a6-aa91-e20fe0ed45a4",
        "name": "loumuenz.com"
      },
      {
        "id": "8fc42578-796a-4291-97ab-94d697528ca2",
        "name": "embwishes.com"
      },
      {
        "id": "df284351-ea0e-4df3-b7b8-c9f3a05c44fe",
        "name": "amblecote.net"
      },
      {
        "id": "0b5dcbd4-32de-4153-bb88-d2b53bfdbfbd",
        "name": "dnzapping.com"
      },
      {
        "id": "86e00230-32fa-43ce-895c-1702693f8a21",
        "name": "buzzurro.net"
      },
      {
        "id": "e8e3e276-d0b9-4771-90c6-6d8f02195d9b",
        "name": "shalomrav.org"
      },
      {
        "id": "7e434e78-528a-4d68-b32d-6edb2a2e0901",
        "name": "basecampbox.com"
      },
      {
        "id": "261be28d-124c-4d43-af03-177c9aca8d89",
        "name": "hoplitellc.com"
      },
      {
        "id": "9fe9d271-034f-4553-89d0-ac0c27416448",
        "name": "gestationsdiabetes.com"
      },
      {
        "id": "5827ecea-7f66-4999-9128-f945df80fd48",
        "name": "busopps.org"
      },
      {
        "id": "cf33e16f-3a1b-41fa-a461-67bfbca7218f",
        "name": "cnrelojes.com"
      },
      {
        "id": "1e02b6cf-44d8-456f-977d-a25f2e8246e2",
        "name": "doorforum.com"
      },
      {
        "id": "37801365-7e88-4998-b64a-6a0fd80e08b7",
        "name": "mettayoga.org"
      },
      {
        "id": "27896b63-c948-4511-9473-1de56f8b6d3c",
        "name": "ombut.com"
      },
      {
        "id": "f63467cb-93c9-4831-b580-136c30f897a4",
        "name": "devlyrics.com"
      },
      {
        "id": "a744f678-9244-4c0e-9b30-f65424418514",
        "name": "theprmummy.com"
      },
      {
        "id": "f6ada4b8-f8d3-469e-ac17-5df9bedf01a1",
        "name": "bushidomma.net"
      },
      {
        "id": "ff091e6b-90f8-4cc0-86f9-ccdce3f24673",
        "name": "mongolianews.info"
      },
      {
        "id": "4f39a40f-8793-480d-a21b-7aa167008bf8",
        "name": "rondabusco.com"
      },
      {
        "id": "aa4b029a-df75-4f19-8296-32582c8d90fb",
        "name": "fruitbrat.com"
      },
      {
        "id": "75d2526c-4a7b-4e4a-9aa9-d2d0046d337e",
        "name": "majicbus.org"
      },
      {
        "id": "fb4fe6a6-f125-46e9-895a-0e6ab7627a99",
        "name": "decoraat.net"
      },
      {
        "id": "022fa3e4-412d-460e-ac2e-80417206eb6e",
        "name": "hayabusamt.com"
      },
      {
        "id": "47e4a437-9d7d-4374-befa-f163d1811a43",
        "name": "napasbdc.org"
      },
      {
        "id": "aa45ab29-3762-4ace-8d49-ada4e59da114",
        "name": "atravelingwitch.com"
      },
      {
        "id": "cf65ca83-ada4-47e7-a19d-844c309691fb",
        "name": "ecomputers.org"
      },
      {
        "id": "8bb41aee-9a55-4adf-b197-277f2dc0b632",
        "name": "buywownow.com"
      },
      {
        "id": "80511d0d-3267-4275-b6ef-8990e2151992",
        "name": "papermoonweddings.com"
      },
      {
        "id": "cbe28b7e-864d-477c-a707-4f9ede10f5c2",
        "name": "supplementsoftheyear.com"
      },
      {
        "id": "1d8d39dd-5346-4b9e-80bf-71c1d0f16288",
        "name": "gesecole.net"
      },
      {
        "id": "88311be2-eb5f-443f-8b6a-3dc4cc7a0f38",
        "name": "phbusiness.net"
      },
      {
        "id": "04dde2a6-965c-4550-aae4-9662772e2013",
        "name": "premegalithic.com"
      },
      {
        "id": "b0d4af2c-7f41-4763-ab98-4a4da7fb5b73",
        "name": "dalerocks.com"
      },
      {
        "id": "253a038b-c9dd-4702-8bab-e92667963c97",
        "name": "carhirechicago.com"
      },
      {
        "id": "8ec3dc0d-796b-461a-b3eb-c264758fdbb1",
        "name": "welnetsanda.org"
      },
      {
        "id": "e60d051a-47df-4604-9c88-924629c3c1e5",
        "name": "gynecocuk.net"
      },
      {
        "id": "45238cab-9519-4a05-85d2-89c6a24120b1",
        "name": "colorflee.org"
      },
      {
        "id": "a249e7fe-5c2e-4281-aeb1-b0afc678c320",
        "name": "thecamco.net"
      },
      {
        "id": "ae07f40e-2bef-4601-aace-bf998d2fd01d",
        "name": "hnk-capljina.com"
      },
      {
        "id": "95e74d29-68dc-4ef5-9240-f86a44fb8d19",
        "name": "goodmedsx.com"
      },
      {
        "id": "4ec35f0d-7720-45a9-9641-2858d7d4a9fc",
        "name": "foxmediagency.com"
      },
      {
        "id": "9767e765-875e-4822-b594-38fd59240894",
        "name": "ytsonline.net"
      },
      {
        "id": "cce2f71c-5ece-4c7f-9d9d-32cba3f7df6a",
        "name": "ghonline.net"
      },
      {
        "id": "aa8c49b9-3cdb-4317-b323-de9a3cc128ec",
        "name": "stuypa.org"
      },
      {
        "id": "28b2d218-cf33-4294-8df8-43fc521d3ffa",
        "name": "designehair.com"
      },
      {
        "id": "1e3acf10-e5ac-413b-a24d-680470f84cdb",
        "name": "ronnybush.net"
      },
      {
        "id": "02e4d3c0-086f-4e73-ba31-667f6e20ead8",
        "name": "phpthemes.net"
      },
      {
        "id": "4956d816-8675-4e53-92b8-f7078dba118f",
        "name": "bobbush.org"
      },
      {
        "id": "b7ed7188-938a-4d55-b478-4620f418bfad",
        "name": "turileco.net"
      },
      {
        "id": "501f56ce-2c25-4c05-8ea3-a04884c7f7da",
        "name": "it-evenement.nl"
      },
      {
        "id": "a15de9f2-6165-4e4d-bd51-02d0913e604c",
        "name": "ecolnomy.com"
      },
      {
        "id": "83777e1b-2fe1-41c9-a45b-6e7e3aacd4fa",
        "name": "anbusivam.com"
      },
      {
        "id": "b56cb49e-a524-4d8c-a2bd-ec3c557d6639",
        "name": "harrietmwelch.com"
      },
      {
        "id": "3284a2ae-3b65-4a04-a65b-f9f248c85f57",
        "name": "nvofficespace.com"
      },
      {
        "id": "2f42a445-0317-4dc0-a795-e25dbf9e6155",
        "name": "cubukluescort.com"
      },
      {
        "id": "071dcdfe-28fc-4c9b-9974-2472e65b0d5c",
        "name": "aaitile.com"
      },
      {
        "id": "1ffd10c9-a3ab-42b8-b59d-713b582edf04",
        "name": "softhunts.com"
      },
      {
        "id": "b4e6ab11-f037-4262-8cd2-321af629d747",
        "name": "famisu.com"
      },
      {
        "id": "70979abe-7e63-46e1-b072-a6cb4d0cf982",
        "name": "coastallasercompany.com"
      },
      {
        "id": "b799998c-6e26-4af4-b88c-769649c498e3",
        "name": "winesnmore.net"
      },
      {
        "id": "a07c8f41-1ff3-453c-bc5d-0b037c7e8f6b",
        "name": "fuyuju.com"
      },
      {
        "id": "eb72e2b5-8912-43cf-bb9e-5f537f276050",
        "name": "meritsoftwebportals.com"
      },
      {
        "id": "e8e2b337-7c14-4868-84b4-0f689a90a6dd",
        "name": "subusiness.org"
      },
      {
        "id": "11492660-b4c6-4851-b06a-888157217729",
        "name": "cseconline.org"
      },
      {
        "id": "c12fd18e-2b5b-4977-aa0c-6c6962dd0116",
        "name": "adimagemarketing.com"
      },
      {
        "id": "90a78c64-4f3d-4855-93fd-ad69ab054eae",
        "name": "paquimetro.net"
      },
      {
        "id": "4d6d6459-7793-4a26-96aa-79a7940a3d9c",
        "name": "racineupci.org"
      },
      {
        "id": "8a8c99fa-70ce-4b92-ad6b-cf1b55941ca3",
        "name": "ecoafrique.net"
      },
      {
        "id": "d1f2e610-84e5-47c1-9344-390e45835612",
        "name": "portabalbufe.com"
      },
      {
        "id": "d48df038-f543-426b-be76-aa6b9120ca8c",
        "name": "florarevival.com"
      },
      {
        "id": "30413d11-cd91-457a-a800-d88392d11586",
        "name": "rhonline.net"
      },
      {
        "id": "ff8009c7-71ce-491c-8e9d-ebe300bba0f1",
        "name": "espacebus.com"
      },
      {
        "id": "b1ceb258-f4cf-47e4-b0d2-8d5c87b2599c",
        "name": "dash.ghonline.net"
      },
      {
        "id": "2827bcec-311e-4504-8682-59daedfb4d05",
        "name": "www.foxmediagency.com"
      },
      {
        "id": "a49ea2ad-9e5b-4b27-a3e6-37d23cc29e30",
        "name": "www.subusiness.org"
      },
      {
        "id": "b221aa82-0dbf-4ed2-8897-886b5e0c0910",
        "name": "www.bushidomma.net"
      },
      {
        "id": "e211a9f7-8fa9-41db-84a4-d909c51cfc61",
        "name": "web.florarevival.com"
      },
      {
        "id": "2535ed09-790c-4bac-8389-13e001f832b2",
        "name": "epc.copenhagen2025.dm"
      },
      {
        "id": "d04c83a4-5876-4371-b66c-a81e0fa79bf6",
        "name": "www.buscacnpj.org"
      },
      {
        "id": "7d47ea3c-47fd-4af1-ae6e-393c3465dbcc",
        "name": "http://ombut.com:443"
      },
      {
        "id": "5e2c1b59-5698-43d8-bac4-280b37e56113",
        "name": "https://phpthemes.net/images/upload/"
      },
      {
        "id": "cf3309da-99a6-4386-b0d6-3320a9f8413f",
        "name": "https://www.subusiness.org/download/aetce17ge?error=interaction_required&error_description=session+information+is+not+sufficient+for+single-sign-on.&state=47"
      },
      {
        "id": "4be3260d-9dc5-4454-aa47-ad28b1f5a7bc",
        "name": "https://web.florarevival.com:443/download/a6d6u9ff13?error=interaction_required&error_description=session+information+is+not+sufficient+for+single-sign-on.&state=6"
      },
      {
        "id": "2a7b0bd0-b431-4403-8de6-21283c51871e",
        "name": "https://www.foxmediagency.com/download/qqa36sa0d6fq066?error=interaction_required&error_description=Session+information+is+not+sufficient+for+single-sign-on.&state=o1"
      },
      {
        "id": "4167570f-204b-4c3c-8917-a5e06d638264",
        "name": "https://welnetsanda.org/images/upload/logo.png/"
      },
      {
        "id": "3bf6be08-d268-4cd0-ba5a-af0a1ed65e39",
        "name": "https://www.buscacnpj.org/download/we7823bn?error=interaction_required&error_description=session+information+is+not+sufficient+for+single-sign-on.&state=3"
      },
      {
        "id": "73f27ca4-187c-4d5b-8d92-af40cf68b5fd",
        "name": "https://dash.ghonline.net:443/download/jyebbtg?error=interaction_required&error_description=Session+information+is+not+sufficient+for+single-sign-on.&state=o1"
      },
      {
        "id": "ffb05fb2-da32-4e86-9e2d-c1f195f03f66",
        "name": "https://phpthemes.net/images/upload/eu.png/"
      },
      {
        "id": "ea12621a-8033-4aad-94d9-2924449ef34b",
        "name": "https://www.bushidomma.net/download/l7o9afe?error=interaction_required&error_description=session+information+is+not+sufficient+for+single-sign-on.&state=2"
      },
      {
        "id": "",
        "name": "8c0051a83b3611ff2b669b670aa005633f3d9e844454a112b31d2a4bc944a234"
      },
      {
        "id": "",
        "name": "16e258b7b712b747a6037d56ee8d2cc99f8f8139da4a3a59c24af0887531ace0"
      },
      {
        "id": "",
        "name": "e31eafb49dbcad079ff177703b5a033f3e0365991cf28492339eccfe0fdf812c"
      },
      {
        "id": "",
        "name": "c8a6302adf92353556c600a0afa9146fbc04663fffe8be90808df2bf04ec5703"
      },
      {
        "id": "",
        "name": "d0576b39bb6c05ea0a24d3a3d5d7cb234454fefc65860f21a97757582adc7650"
      },
      {
        "id": "",
        "name": "0b916d2b4a02d01b42c2b04e281d786a05cc7974d2c4a272b01e8060fa713403"
      },
      {
        "id": "",
        "name": "28a8bdaee803d9cf9186ff4756e15b0fb491fd3b65bde002361615f27e5ca92d"
      },
      {
        "id": "",
        "name": "c73050860c8aaa0f79c03781519cdcee133832805e2e3e778fef3cb0e917efb1"
      },
      {
        "id": "",
        "name": "de8ddc2451fb1305d76ab20661725d11c77625aeeaa1447faf3fbf56706c87f1"
      },
      {
        "id": "",
        "name": "e79d19d68d307c12413f8549aafa4a56776002dd04601e36e0125b2e6d56ff94"
      },
      {
        "id": "",
        "name": "965894996e2cb9be1e0ccc509e079e7eca072cbc4e68945beb00ff5979dda19c"
      },
      {
        "id": "",
        "name": "b394e7a3b350b2104b73e29a04e48e5ede5078b9a811abae58d842ce3442c6b3"
      },
      {
        "id": "",
        "name": "3c065947461df428b0d29e401e2a28a0d2560943e96d3ac8b9ed71858fbcec38"
      },
      {
        "id": "",
        "name": "e7ed0cd4115f3ff35c38d36cc50c6a13eba2d845554439a36108789cd1e05b17"
      },
      {
        "id": "",
        "name": "30475ff5b32776e554433ff00e7c18590253521024662c267abaefd24f1b9bbe"
      },
      {
        "id": "",
        "name": "784a914bd1878ad68a6cf3f693da5ddcc2f04b794204333098ad749b7e372fd4"
      },
      {
        "id": "",
        "name": "87929c8f53341a5e413950d33c7946c64e1d4b2eba6d1a8b2d08ef56f7065052"
      },
      {
        "id": "",
        "name": "64bae6a215ad9e956d1028603438228003d832bdd5e586ad4988f5c7ad1c54f0"
      },
      {
        "id": "",
        "name": "6788365386ccd34d1db681c61ef07ef4d2faea5672571b77a76dc48f327afaa9"
      },
      {
        "id": "",
        "name": "c96338533d0ab4de8201ce1f793e9ea18d30c6179daf1e312e0f01aff8f50415"
      },
      {
        "id": "",
        "name": "53086e3b557a1d21cf7f4ffc73d92c39b08872334a8cdb09dda0a06bd060cfe9"
      },
      {
        "id": "",
        "name": "69b685fadce4f34bc4964b3d78d43694a428ae1ee4d2fe0ce4ed26fad07847fa"
      },
      {
        "id": "",
        "name": "36e516182b4c8aa48ea3e50b7dc353f32d3412f59fb0cb1c7b3590aa4d821c57"
      },
      {
        "id": "",
        "name": "56f0247049be8b9dc1da7c55957d2fb4f7177965ba62789c512f3e2b4c0c5c26"
      },
      {
        "id": "",
        "name": "a95e3857e2f32c2a9c23accadebc1ad6aabf73fed9d63c792d69122d9ec6726d"
      },
      {
        "id": "",
        "name": "c5267fefaac1764eba5f42681eb216f146b7d18fcbf546275d33e70cb36fdfba"
      },
      {
        "id": "",
        "name": "42c3b9cad6c8383699eba4f82d51908c0d61e9ea454bc40447cf20475ce20ff0"
      },
      {
        "id": "",
        "name": "262a1003a2cd04993b29e687686eba573d6202fea8611c437ecbd6312802677a"
      },
      {
        "id": "",
        "name": "44cfba85aa27265779b01f6eb8b69718462b1ca8078b21066061e8d1622dff7a"
      },
      {
        "id": "",
        "name": "06a70c54c580ec4c362bfbc94147a0f1ac9020c421933ccf494a8d553b114260"
      },
      {
        "id": "",
        "name": "a82c8845587a87010eab52ef8c35d45eaea8eb8102aae77ec96e222197b7db66"
      },
      {
        "id": "",
        "name": "29a70241660ff3234f1c5e8c01878ee01adb4a289262bd37403e1a323129ea86"
      },
      {
        "id": "",
        "name": "795ad4789a185c3abc35b3ad82117db6b60a7b8ab857e41080873f070d4a06f0"
      },
      {
        "id": "",
        "name": "774841a2bfb07b61a8be3de8ae31e9847f987de652eef179761dc3d1b34c42ff"
      },
      {
        "id": "",
        "name": "45d8d4f04eb44dc5d10290038825194b0ffc38048a786b4a8b81bb796afc58a3"
      },
      {
        "id": "",
        "name": "9d61c4e21bbbddde5bb780ea0c5238a3538a84b9afe98d62d08845b47fb5caa9"
      },
      {
        "id": "",
        "name": "e9d8f28fd0aef3bc3f5b28a41b3f342165b371db9aefd7d03f2aba4292009d3e"
      },
      {
        "id": "",
        "name": "3e7478d3854eaeed487230ba9299c87d5a5d70e4fbeac841555327c76b7b405e"
      },
      {
        "id": "",
        "name": "de13e4b4368fbe8030622f747aed107d5f6c5fec6e11c31060821a12ed2d6ccd"
      },
      {
        "id": "",
        "name": "4ed76fa68ef9e1a7705a849d47b3d9dcdf969e332bd5bcb68138579c288a16d3"
      },
      {
        "id": "",
        "name": "b6d866054dedf7a882dd1fa405a066de1278e35acf639b3a0e850a637d27c4bc"
      },
      {
        "id": "",
        "name": "2261c7640fe2f3c2385de61c546b5020ec8a486ad5bad64c31bc9268f6b36a2c"
      },
      {
        "id": "",
        "name": "8421e7995778faf1f2a902fb2c51d85ae39481f443b7b3186068d5c33c472d99"
      },
      {
        "id": "",
        "name": "bcd30f2116f5ba6731c628483d597b2ba3620ed464c63875855906306beb102a"
      },
      {
        "id": "",
        "name": "e036e2ba402d808adbb7982ec8d7a207849ff40456633b2b372bc7916d9dc22f"
      },
      {
        "id": "",
        "name": "bc8b022c10bcab39da302446b0a50988de94607c7e724f2051578e8ed2f8bbe7"
      },
      {
        "id": "",
        "name": "6b363e0f16fc5a612bd98631e7cdc4f68a95329e92c21ef0495c9117b8b8f360"
      },
      {
        "id": "",
        "name": "5c3208c5217933e16c5119e7baf78f85fd409e8822d1cd7a8ef2d52a5bd511c1"
      },
      {
        "id": "",
        "name": "7be77e6166aae9a89b16b64b593f35afc7424926047635f2230a4e364c6a46d8"
      },
      {
        "id": "",
        "name": "84d6a8b47edadf5725d9937d8928a90d190e0c98b5b4d1a4c58e97cddcd36768"
      },
      {
        "id": "",
        "name": "f988d58e4a32b908ff7a557d740c6860c59807832c7626774330dcaed65ead14"
      },
      {
        "id": "",
        "name": "29cd44aa2a51a200d82cca578d97dc13241bc906ea6a33b132c6ca567dc8f3ad"
      },
      {
        "id": "",
        "name": "3021f4d365a641722748c5e60d983a080db17bef8f0a1dbe624ffe63cd544cc1"
      },
      {
        "id": "",
        "name": "ae8d2cef8eac099f892e37cc50825d329459baa9625b71fb6f4b7e8f33c6ccce"
      },
      {
        "id": "",
        "name": "a3f9e20315663e4e8feb13e77563e3cb0f2f4844734987e51e14bd172b9a04fd"
      },
      {
        "id": "",
        "name": "46314092c8d00ab93cbbdc824b9fc39dec9303169163b9625bae3b1717d70ebc"
      },
      {
        "id": "",
        "name": "7c96d08f5ce46d1a857184490a7e68ca2b02e9cbe9d188742f184f21bc9c62d9"
      },
      {
        "id": "",
        "name": "e1e597852d684bd6d0395d5094e58831f13635f668e7cf66ba71b8b66be0ce6c"
      },
      {
        "id": "",
        "name": "9e67f72bfbc8772ce10633430e1277fd8374e99877ddedb598b4f6717c799eeb"
      },
      {
        "id": "",
        "name": "b1606ca49aa15eadb039f33d438697973b203693d0003e467e1f33b36d10a530"
      },
      {
        "id": "",
        "name": "2712f4ac5ad422bcf749699389cb1a0111a1b11e298efb0cffebc2e2f0becb5f"
      },
      {
        "id": "",
        "name": "f333bc5238e39790fb7560de067a852e9a99df2bb783cf08738d8a0d424b9658"
      },
      {
        "id": "",
        "name": "1df74ce45aa9320c48858eddce3f46f5687fbfdcfd497d92a1e17476e7a2951e"
      },
      {
        "id": "",
        "name": "2c3708a103b257fa75fcb34948c817fd564d4479f1e267b33c5b08f0d4c7634f"
      },
      {
        "id": "",
        "name": "30c71d644bc72e0d55d46bed753ab3f72dc77b7f1be0e34693c957939a779507"
      },
      {
        "id": "",
        "name": "4d528842c7fe73681dfe569d38a39f8d38ca5548dbc8b6ac02df096713a92efd"
      },
      {
        "id": "",
        "name": "7d2b6c48cbd6cef05ea2bdae7dfc001504cccda99dd89eb7fe6646e96c1d5515"
      },
      {
        "id": "",
        "name": "50746ddd81a5dbc5cec793209ab552125fff9c7184aa5bcfe22d6c3b267f67f1"
      },
      {
        "id": "",
        "name": "eb10443a2f0b9a25d01a84426a6a8532b0e7c9157abda55b94c98a1fd2d45562"
      },
      {
        "id": "",
        "name": "843b22df66f87a587be77145da163f9615fe8164a5ea17f9e33562ff43894fbf"
      },
      {
        "id": "",
        "name": "79e0ab17e761a00ad12b9848f1f07b507f57db532fa2df8c722693e14feb17c3"
      },
      {
        "id": "",
        "name": "31f3606433e95bfbb047d31c885e56a70111e130f3d2da0580644c01323b46d1"
      },
      {
        "id": "",
        "name": "93e9402af72b355554f9ba93c64871b1bae5be498e3b8a10e61ebdd10ab0d050"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "Belgium"
      },
      {
        "id": "",
        "name": "Syrian Arab Republic"
      },
      {
        "id": "",
        "name": "Kuwait"
      },
      {
        "id": "",
        "name": "Kosovo"
      },
      {
        "id": "",
        "name": "Bangladesh"
      },
      {
        "id": "",
        "name": "Iran, Islamic Republic of"
      },
      {
        "id": "",
        "name": "Iceland"
      },
      {
        "id": "",
        "name": "Government and administrations"
      },
      {
        "id": "",
        "name": "softhunts.com"
      },
      {
        "id": "",
        "name": "thecamco.net"
      },
      {
        "id": "",
        "name": "loumuenz.com"
      },
      {
        "id": "",
        "name": "harrietmwelch.com"
      },
      {
        "id": "",
        "name": "it-evenement.nl"
      },
      {
        "id": "",
        "name": "speedifynews.com"
      },
      {
        "id": "",
        "name": "dalerocks.com"
      },
      {
        "id": "",
        "name": "fruitbrat.com"
      },
      {
        "id": "",
        "name": "bushidomma.net"
      },
      {
        "id": "",
        "name": "ecoafrique.net"
      },
      {
        "id": "",
        "name": "coastallasercompany.com"
      },
      {
        "id": "",
        "name": "hnk-capljina.com"
      },
      {
        "id": "",
        "name": "shalomrav.org"
      },
      {
        "id": "",
        "name": "ytsonline.net"
      },
      {
        "id": "",
        "name": "doorforum.com"
      },
      {
        "id": "",
        "name": "welnetsanda.org"
      },
      {
        "id": "",
        "name": "cnrelojes.com"
      },
      {
        "id": "",
        "name": "dash.ghonline.net"
      },
      {
        "id": "",
        "name": "famisu.com"
      },
      {
        "id": "",
        "name": "gynecocuk.net"
      },
      {
        "id": "",
        "name": "stuypa.org"
      },
      {
        "id": "",
        "name": "rhonline.net"
      },
      {
        "id": "",
        "name": "busopps.org"
      },
      {
        "id": "",
        "name": "bobbush.org"
      },
      {
        "id": "",
        "name": "portabalbufe.com"
      },
      {
        "id": "",
        "name": "web.florarevival.com"
      },
      {
        "id": "",
        "name": "nvofficespace.com"
      },
      {
        "id": "",
        "name": "alpinemfg.net"
      },
      {
        "id": "",
        "name": "buddhismnewsdaily.org"
      },
      {
        "id": "",
        "name": "ronnybush.net"
      },
      {
        "id": "",
        "name": "amblecote.net"
      },
      {
        "id": "",
        "name": "buzzurro.net"
      },
      {
        "id": "",
        "name": "designehair.com"
      },
      {
        "id": "",
        "name": "florarevival.com"
      },
      {
        "id": "",
        "name": "adimagemarketing.com"
      },
      {
        "id": "",
        "name": "colorflee.org"
      },
      {
        "id": "",
        "name": "winesnmore.net"
      },
      {
        "id": "",
        "name": "cseconline.org"
      },
      {
        "id": "",
        "name": "gestationsdiabetes.com"
      },
      {
        "id": "",
        "name": "dnzapping.com"
      },
      {
        "id": "",
        "name": "gesecole.net"
      },
      {
        "id": "",
        "name": "cubukluescort.com"
      },
      {
        "id": "",
        "name": "meritsoftwebportals.com"
      },
      {
        "id": "",
        "name": "mongolianews.info"
      },
      {
        "id": "",
        "name": "embwishes.com"
      },
      {
        "id": "",
        "name": "majicbus.org"
      },
      {
        "id": "",
        "name": "fuyuju.com"
      },
      {
        "id": "",
        "name": "rondabusco.com"
      },
      {
        "id": "",
        "name": "buscacnpj.org"
      },
      {
        "id": "",
        "name": "devredin.com"
      },
      {
        "id": "",
        "name": "hayabusamt.com"
      },
      {
        "id": "",
        "name": "napasbdc.org"
      },
      {
        "id": "",
        "name": "hoplitellc.com"
      },
      {
        "id": "",
        "name": "epc.copenhagen2025.dm"
      },
      {
        "id": "",
        "name": "espacebus.com"
      },
      {
        "id": "",
        "name": "carhirechicago.com"
      },
      {
        "id": "",
        "name": "aaitile.com"
      },
      {
        "id": "",
        "name": "theprmummy.com"
      },
      {
        "id": "",
        "name": "ghonline.net"
      },
      {
        "id": "",
        "name": "decoraat.net"
      },
      {
        "id": "",
        "name": "ombut.com"
      },
      {
        "id": "",
        "name": "paquimetro.net"
      },
      {
        "id": "",
        "name": "subusiness.org"
      },
      {
        "id": "",
        "name": "turileco.net"
      },
      {
        "id": "",
        "name": "atravelingwitch.com"
      },
      {
        "id": "",
        "name": "premegalithic.com"
      },
      {
        "id": "",
        "name": "supplementsoftheyear.com"
      },
      {
        "id": "",
        "name": "phbusiness.net"
      },
      {
        "id": "",
        "name": "foxmediagency.com"
      },
      {
        "id": "",
        "name": "racineupci.org"
      },
      {
        "id": "",
        "name": "devlyrics.com"
      },
      {
        "id": "",
        "name": "ecolnomy.com"
      },
      {
        "id": "",
        "name": "mettayoga.org"
      },
      {
        "id": "",
        "name": "papermoonweddings.com"
      },
      {
        "id": "",
        "name": "anbusivam.com"
      },
      {
        "id": "",
        "name": "creatday.com"
      },
      {
        "id": "",
        "name": "basecampbox.com"
      },
      {
        "id": "",
        "name": "goodmedsx.com"
      },
      {
        "id": "",
        "name": "ecomputers.org"
      },
      {
        "id": "",
        "name": "phpthemes.net"
      },
      {
        "id": "",
        "name": "buywownow.com"
      }
    ]
  },
  "external_refs": [
    {
      "id": "a8e1e9dc-9922-4022-be74-fd503d7562ad",
      "standard_id": "external-reference--3e970354-2558-5140-8b2e-38e596a70c4a",
      "entity_type": "External-Reference",
      "source_name": "AlienVault",
      "description": null,
      "url": "https://otx.alienvault.com/pulse/69d4e667e8ab2d6d4082fc5b",
      "hash": null,
      "external_id": "69d4e667e8ab2d6d4082fc5b",
      "created": "2026-04-07T11:26:21.155Z",
      "modified": "2026-04-07T11:26:21.155Z",
      "createdById": null
    },
    {
      "id": "bf1cc0fd-74f6-4bd9-9e9e-395819d9fae3",
      "standard_id": "external-reference--9a033d4e-c226-5287-8dd9-720872903755",
      "entity_type": "External-Reference",
      "source_name": "AlienVault",
      "description": null,
      "url": "https://www.proofpoint.com/us/blog/threat-insight/id-come-running-back-eu-again-ta416-resumes-european-government-espionage",
      "hash": null,
      "external_id": null,
      "created": "2026-04-07T11:26:21.789Z",
      "modified": "2026-04-07T11:26:21.789Z",
      "createdById": null
    }
  ]
}