{
    "type": "bundle",
    "id": "bundle--e61dadad-6213-41d8-9d65-11fc394a5b2c",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--98d6f884-3b98-4866-b34b-1af67d7203f4",
            "created": "2026-07-02T08:14:41.090215Z",
            "modified": "2026-07-02T08:25:08.097998Z",
            "name": "DecryptionDigest",
            "identity_class": "organization"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--4a2974a6-44ce-4160-8b42-4ba5b7990474",
            "value": "check02id.com"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--0085aeac-5fe7-413f-81c0-e6d00e5a5622",
            "value": "83.136.209.22"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--cff26c12-ab46-45de-983a-273ba98c382d",
            "value": "83.136.208.246"
        },
        {
            "type": "ipv4-addr",
            "spec_version": "2.1",
            "id": "ipv4-addr--9f09d49f-5595-4aee-9644-3249a16bf133",
            "value": "104.145.210.107"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--17973f79-da4a-4866-9da2-feb9f10edaf3",
            "value": "zoom.ue01web.us"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--f47ec552-f246-45e7-977a-e70dc82dfab2",
            "hashes": {
                "SHA-256": "17158cd6490a2b3c672d087f3d69107643d6a6f7c67345461b10ae18f27e28d1"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--d93f1503-26ae-4367-8553-c6051be87c50",
            "hashes": {
                "SHA-256": "db446f0e1d18b43805bfefe1af934ae4b0879e376904635cc7e14eae2d7fc682"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--291fee96-8d7b-41d2-802a-ab93fff98fae",
            "hashes": {
                "SHA-256": "dd1c72823f933952619cbb86aaeaea43057a259e9a0c9e3b11c82225ec3faaa1"
            }
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--a028af73-b12e-47e6-b8f5-458cf6f2b4e0",
            "value": "ms-live.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--39dedeb1-6d19-4878-b7d2-20291a7c04cb",
            "value": "thriddata.com"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--d9cdd4a8-5b79-4429-9614-3f692b6d4466",
            "value": "teams-live.org"
        },
        {
            "type": "domain-name",
            "spec_version": "2.1",
            "id": "domain-name--99097a0e-c83a-4929-ac63-ba940e3863e2",
            "value": "uu03webzoom.us"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb",
            "created": "2026-07-02T15:53:55.768394Z",
            "modified": "2026-07-02T15:53:55.768394Z",
            "name": "Bluenoroff"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--e9898156-8167-4fbd-a840-170b1113fdcc",
            "created_by_ref": "identity--98d6f884-3b98-4866-b34b-1af67d7203f4",
            "created": "2026-07-02T15:53:55.782586Z",
            "modified": "2026-07-02T15:53:55.782586Z",
            "name": "BlueNoroff Deepfake Zoom Attack: 100 Crypto Executives Compromised in 5 Minutes",
            "published": "2026-04-30T00:00:00Z",
            "object_refs": [
                "identity--98d6f884-3b98-4866-b34b-1af67d7203f4",
                "domain-name--4a2974a6-44ce-4160-8b42-4ba5b7990474",
                "ipv4-addr--0085aeac-5fe7-413f-81c0-e6d00e5a5622",
                "ipv4-addr--cff26c12-ab46-45de-983a-273ba98c382d",
                "ipv4-addr--9f09d49f-5595-4aee-9644-3249a16bf133",
                "domain-name--17973f79-da4a-4866-9da2-feb9f10edaf3",
                "file--f47ec552-f246-45e7-977a-e70dc82dfab2",
                "file--d93f1503-26ae-4367-8553-c6051be87c50",
                "file--291fee96-8d7b-41d2-802a-ab93fff98fae",
                "domain-name--a028af73-b12e-47e6-b8f5-458cf6f2b4e0",
                "domain-name--39dedeb1-6d19-4878-b7d2-20291a7c04cb",
                "domain-name--d9cdd4a8-5b79-4429-9614-3f692b6d4466",
                "domain-name--99097a0e-c83a-4929-ac63-ba940e3863e2",
                "threat-actor--f7f0d913-f17b-5632-a48a-76b4eef8a1cb"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.decryptiondigest.com/blog/bluenoroff-deepfake-zoom-crypto-clickfix"
                }
            ]
        }
    ]
}