{
    "type": "bundle",
    "id": "bundle--8b53a8a9-010f-4f98-ae45-cad1b471b769",
    "objects": [
        {
            "type": "identity",
            "spec_version": "2.1",
            "id": "identity--0648e9f1-986a-40ab-8f6c-0495948f69ec",
            "created": "2023-05-23T01:10:41.336415Z",
            "modified": "2024-09-11T13:26:42.312985Z",
            "name": "Genians",
            "identity_class": "organization"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--93ef5500-00ed-4bf9-a6f9-c90293f08962",
            "value": "taini7700@outlook.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--7b1b6129-ee33-40b7-9008-d905282c7800",
            "value": "sven5500@proton.me"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--b4da8bcd-f28b-4313-bfb5-f2f07186c818",
            "value": "montry111@proton.me"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--b7e0612a-b9a2-4de6-b31f-44846940f96e",
            "value": "jamjack2026@proton.me"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--ecf81dcf-130b-44fd-84eb-2c589bfca7f3",
            "value": "jametony8@outlook.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--2b71614a-9a26-48cd-be92-e61ab3362e9a",
            "value": "jackal3300@proton.me"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--8111be09-6199-45b1-a248-ccf8ae47f0b0",
            "value": "dustinharrise91@outlook.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--a0653180-ec30-4f7b-9ad6-47eee870e6ee",
            "value": "choemiyang@hotmail.com"
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--0a1ebd61-1348-4b2d-875a-661ace13ad8e",
            "value": "baras6600@proton.me"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--ec7b2ddb-7d1a-4101-8daf-4d752ddd6d7f",
            "value": "https://github.com/jeni534"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--230db410-a9df-41db-8c89-170608bdb8c4",
            "value": "https://github.com/choemiyang"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--42f32c18-7d5e-4b57-91f4-974d2a6d957a",
            "value": "https://github.com/baras6600P"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--284d65ab-7edf-40ea-8e11-91e5b8bb7b97",
            "value": "https://github.com/jamestony88"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--4dd63081-61b1-46ff-9268-f1f6ee0c77ff",
            "value": "https://github.com/urusa4400"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--1a514b88-4ece-4e0f-ba0a-7c30b3897e2b",
            "value": "https://github.com/jamjack2026"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--62f380fb-153b-4e3a-8f18-35cb23735c9e",
            "value": "https://github.com/montry111"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--a0d8f2ef-06ab-4391-9b17-1a54907a4a60",
            "value": "https://github.com/sven5500"
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--738aba16-7e17-4ecb-b9e4-d63d6cef08e8",
            "hashes": {
                "MD5": "f648bdd3c2cd902e239149de86d43e8f",
                "SHA-1": "8f9885fff4685eba3d5072f57a9c8bed3337c186",
                "SHA-256": "352915ff6862e551a5a3b64339f36784d8365967168f02f439e0f9626324947c"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--7db6d8a9-0d63-451f-a78e-fdf6cc281448",
            "hashes": {
                "MD5": "e50f2ae7fb03675a1ef58b1cf9cda6d1",
                "SHA-1": "c8cb836b3f67d0cae6fdeff4d90410ce9355a97e",
                "SHA-256": "b9f7133bddc4145b0dc9ddabe22cdebd6caed9ec5281728b6eeb67781a283a8b"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--06c9a1b8-b439-497b-94ca-28a9abd0b858",
            "hashes": {
                "MD5": "d0894d4626aae0f96d6b84ca3bb71a36",
                "SHA-1": "43e3fa124c67b6448ffcbc073419e949eeff44dc",
                "SHA-256": "fa0150d7fc744aa88529a798ee4e54519c3bdac7bfd45f59eb00092548560e2a"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--87f9a7a4-0025-456f-89e3-07c220e9fcfa",
            "hashes": {
                "MD5": "ce5932b88f879f26006df81f2fa7667e",
                "SHA-1": "3d4867e2c63e62b5102ccba44920ccef79c619e4",
                "SHA-256": "852cce9bc86aaa36c9ceaf16517dfb07a46246f7c047ed8305b1278444f72837"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--95dfd373-336e-490b-b9ce-2a75677e0f40",
            "hashes": {
                "MD5": "bb88940e915b11f6330b7446f6037f5b",
                "SHA-1": "693d6dac7afa49d1a9d07ef0c6184ebb3a9998e7",
                "SHA-256": "1a88cb87d0242a6f3383295057d938098c10461e92ea015bc649a5a67f243c79"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--5410e88a-b03b-40d8-9b8d-be4ab6c73f0f",
            "hashes": {
                "MD5": "a2015665a3e18bf0ef86e3931245c7e6",
                "SHA-1": "7638e92a438613f29a0bda9a848d0043decc5016",
                "SHA-256": "7d3d860489387f3722ac08fec8eb990aa8dcfdcefbc96489f9404dd016e16a96"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--cef591c9-b1fe-4ad9-9d57-8931aa3711e6",
            "hashes": {
                "MD5": "900e832c10d851bbdef3fb191a15db0e",
                "SHA-1": "f72bd8bde005b8646d64f6a516407b6f9d2c680a",
                "SHA-256": "8d0aad27440fb29f9ab5f1af0f7977ed332d945d4bbeb7af0a96e07ac24eaaff"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ed0bbe3a-10f1-41da-b2eb-353d09890b09",
            "hashes": {
                "MD5": "8db2f20b719dcb7029d6296505622093",
                "SHA-1": "cf37945e460d94aa5d512eb91265a7b188e5fde0",
                "SHA-256": "50c8382e99cda7de463ede54f78b4ba05964f3890fe41bb4e8dafa05a3e8e2be"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--6612fffd-10ca-4000-8767-0e23fa651210",
            "hashes": {
                "MD5": "7a53089053b1381742856a5cf2b95f8b",
                "SHA-1": "a8e8dde205a7ad45bf85d10be4ed46e2bab00d59",
                "SHA-256": "40bc88ab9e91d10b8d23a2df6158a0a68b367b3325de186e75d4a197d621a9c8"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--ec36657a-3426-46ac-9888-70977279167d",
            "hashes": {
                "MD5": "685bfc6b2c29fbc16cfad908894add55",
                "SHA-1": "5dc805aeec6d0db790ce298cd55a751ce129b5b9",
                "SHA-256": "23a91475c0e3da3279416bd13995540fe3bf793f239f5b1a7614a62f6673ec19"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--db3a729d-cc36-44cc-bbd6-3b839b866b12",
            "hashes": {
                "MD5": "500e0bc0d7579fb338912770964076fe",
                "SHA-1": "1d24770bd9a291bc3c2f2ebe8353430acf97ad9b",
                "SHA-256": "3962777e86602dc73af70b27b894c03bd9bb4c5f985887c2f226ec61a4b863aa"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--a5e2a234-a861-4b7e-bdff-072363e51c78",
            "hashes": {
                "MD5": "1523a2fcc901965ab4568d9fe829e4af",
                "SHA-1": "441b709b1a57353a7b127d9a35b5002eee7e6efb",
                "SHA-256": "f1bd5817678f498966f033f61b617dee5c8e81191901fea7c4a89146bfe91091"
            }
        },
        {
            "type": "file",
            "spec_version": "2.1",
            "id": "file--2c05db64-0b07-4270-ab59-8aa3157144c2",
            "hashes": {
                "MD5": "10780939962b54addc9d31f57d80edfc",
                "SHA-1": "16726a9bc7a98c728aa5d6f6089c922aabd4de5f",
                "SHA-256": "b4a3401f9953fe28023e6993d53a68de09838a09c722f318f35c9006ef3ca5a1"
            }
        },
        {
            "type": "email-addr",
            "spec_version": "2.1",
            "id": "email-addr--2f2f8b80-48a4-47aa-a637-20a55ce2897a",
            "value": "urusa4400@proton.me"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--b956290d-1bc8-4518-bfd7-fad46c207a95",
            "value": "https://pastebin.com/raw/gybpx38s"
        },
        {
            "type": "url",
            "spec_version": "2.1",
            "id": "url--e5687297-585c-4a81-b517-7de54e4b819a",
            "value": "https://raw.githubusercontent.com/sven5500/firtfirter/main/"
        },
        {
            "type": "threat-actor",
            "spec_version": "2.1",
            "id": "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1",
            "created": "2026-09-26T18:45:46.741828Z",
            "modified": "2026-09-26T18:45:46.741828Z",
            "name": "Kimsuky"
        },
        {
            "type": "report",
            "spec_version": "2.1",
            "id": "report--02e5435b-7b67-4427-8795-d6e588f580bd",
            "created_by_ref": "identity--0648e9f1-986a-40ab-8f6c-0495948f69ec",
            "created": "2026-09-26T18:45:46.748156Z",
            "modified": "2026-09-26T18:45:46.748156Z",
            "name": "Kimsuky Uses the AI Agent 'opencode' to Create Decoys as Its GitHub PAT-Based LNK Attacks Evolve",
            "published": "2026-09-06T00:00:00Z",
            "object_refs": [
                "identity--0648e9f1-986a-40ab-8f6c-0495948f69ec",
                "email-addr--93ef5500-00ed-4bf9-a6f9-c90293f08962",
                "email-addr--7b1b6129-ee33-40b7-9008-d905282c7800",
                "email-addr--b4da8bcd-f28b-4313-bfb5-f2f07186c818",
                "email-addr--b7e0612a-b9a2-4de6-b31f-44846940f96e",
                "email-addr--ecf81dcf-130b-44fd-84eb-2c589bfca7f3",
                "email-addr--2b71614a-9a26-48cd-be92-e61ab3362e9a",
                "email-addr--8111be09-6199-45b1-a248-ccf8ae47f0b0",
                "email-addr--a0653180-ec30-4f7b-9ad6-47eee870e6ee",
                "email-addr--0a1ebd61-1348-4b2d-875a-661ace13ad8e",
                "url--ec7b2ddb-7d1a-4101-8daf-4d752ddd6d7f",
                "url--230db410-a9df-41db-8c89-170608bdb8c4",
                "url--42f32c18-7d5e-4b57-91f4-974d2a6d957a",
                "url--284d65ab-7edf-40ea-8e11-91e5b8bb7b97",
                "url--4dd63081-61b1-46ff-9268-f1f6ee0c77ff",
                "url--1a514b88-4ece-4e0f-ba0a-7c30b3897e2b",
                "url--62f380fb-153b-4e3a-8f18-35cb23735c9e",
                "url--a0d8f2ef-06ab-4391-9b17-1a54907a4a60",
                "file--738aba16-7e17-4ecb-b9e4-d63d6cef08e8",
                "file--7db6d8a9-0d63-451f-a78e-fdf6cc281448",
                "file--06c9a1b8-b439-497b-94ca-28a9abd0b858",
                "file--87f9a7a4-0025-456f-89e3-07c220e9fcfa",
                "file--95dfd373-336e-490b-b9ce-2a75677e0f40",
                "file--5410e88a-b03b-40d8-9b8d-be4ab6c73f0f",
                "file--cef591c9-b1fe-4ad9-9d57-8931aa3711e6",
                "file--ed0bbe3a-10f1-41da-b2eb-353d09890b09",
                "file--6612fffd-10ca-4000-8767-0e23fa651210",
                "file--ec36657a-3426-46ac-9888-70977279167d",
                "file--db3a729d-cc36-44cc-bbd6-3b839b866b12",
                "file--a5e2a234-a861-4b7e-bdff-072363e51c78",
                "file--2c05db64-0b07-4270-ab59-8aa3157144c2",
                "email-addr--2f2f8b80-48a4-47aa-a637-20a55ce2897a",
                "url--b956290d-1bc8-4518-bfd7-fad46c207a95",
                "url--e5687297-585c-4a81-b517-7de54e4b819a",
                "threat-actor--3cad7692-b5b4-565b-88b1-63998b3f44a1"
            ],
            "external_references": [
                {
                    "source_name": "source",
                    "url": "https://www.genians.co.kr/en/blog/threat_intelligence/ai-agent-opencode"
                }
            ]
        }
    ]
}