{
    "type": "bundle",
    "id": "bundle--d5396b82-5f4d-47aa-a4cb-3e2505b05587",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--68eb16e6-4a21-423b-9083-83ba466f7811",
            "created": "2025-03-05T10:46:40.462159Z",
            "modified": "2026-03-03T13:11:59.453852Z",
            "name": "KudelskiSecurity",
            "identity_class": "organization"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--a6b38f84-4a9c-5481-ad0c-9b5ee8bd5a96",
            "created": "2026-09-07T11:46:04.706215Z",
            "modified": "2026-09-07T11:46:04.706215Z",
            "name": "APT38"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--779b8f52-56c4-5aee-b87a-0e7e139d8eff",
            "created": "2026-09-07T11:46:04.706923Z",
            "modified": "2026-09-07T11:46:04.706923Z",
            "name": "Andariel"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-09-07T11:46:04.707555Z",
            "modified": "2026-09-07T11:46:04.707555Z",
            "name": "Kimsuky"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--f9b73b11-e500-54c0-bf96-296bdf6d9355",
            "created": "2026-09-07T11:46:04.70821Z",
            "modified": "2026-09-07T11:46:04.70821Z",
            "name": "CryptoCore"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--1606607e-9551-57f2-9093-3384040c739e",
            "created": "2026-09-07T11:46:04.708878Z",
            "modified": "2026-09-07T11:46:04.708878Z",
            "name": "TEMP.Hermit"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--832c6236-8da3-5a3f-9c46-fd0d5f10458d",
            "created": "2026-09-07T11:46:04.709526Z",
            "modified": "2026-09-07T11:46:04.709526Z",
            "name": "JadeSleet"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--07508793-2a33-5982-b040-9114591a8330",
            "created": "2026-09-07T11:46:04.710199Z",
            "modified": "2026-09-07T11:46:04.710199Z",
            "name": "CitrineSleet"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--03550cfe-1db3-5bcf-b290-8a1a27da993d",
            "created": "2026-09-07T11:46:04.71124Z",
            "modified": "2026-09-07T11:46:04.71124Z",
            "name": "MoonstoneSleet"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
            "created": "2026-09-07T11:46:04.711897Z",
            "modified": "2026-09-07T11:46:04.711897Z",
            "name": "Lazarus"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--1d227bee-f26c-5f74-a3f8-5bdb18774b64",
            "created": "2026-09-07T11:46:04.712524Z",
            "modified": "2026-09-07T11:46:04.712524Z",
            "name": "FamousChollima"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--64a87205-510b-4bc9-a669-c5acfc893ac1",
            "created_by_ref": "identity--68eb16e6-4a21-423b-9083-83ba466f7811",
            "created": "2026-09-07T11:46:04.712838Z",
            "modified": "2026-09-07T11:46:04.712838Z",
            "name": "Beyond Lazarus: Organization of DPRK Cyber Capabilities",
            "published": "2026-09-07T00:00:00Z",
            "object_refs": [
                "identity--68eb16e6-4a21-423b-9083-83ba466f7811",
                "threat-actor--a6b38f84-4a9c-5481-ad0c-9b5ee8bd5a96",
                "threat-actor--779b8f52-56c4-5aee-b87a-0e7e139d8eff",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
                "threat-actor--f9b73b11-e500-54c0-bf96-296bdf6d9355",
                "threat-actor--1606607e-9551-57f2-9093-3384040c739e",
                "threat-actor--832c6236-8da3-5a3f-9c46-fd0d5f10458d",
                "threat-actor--07508793-2a33-5982-b040-9114591a8330",
                "threat-actor--03550cfe-1db3-5bcf-b290-8a1a27da993d",
                "threat-actor--af08d5c9-f507-5ed5-9986-7ffea3df195b",
                "threat-actor--1d227bee-f26c-5f74-a3f8-5bdb18774b64"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://kudelskisecurity.com/research/beyond-lazarus-organization-of-dprk-cyber-capabilities"
                }
            ]
        }
    ]
}