{
 "type": "bundle",
 "id": "bundle--6691011c-7d50-45e2-8c1b-049409596731",
 "objects": [
  {
   "type": "marking-definition",
   "spec_version": "2.1",
   "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
   "created": "2017-01-20T00:00:00.000Z",
   "definition_type": "tlp",
   "name": "TLP:WHITE",
   "definition": {
    "tlp": "white"
   }
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "SecurityStudies.info",
   "identity_class": "organization",
   "description": "Open-source security intelligence on Asia-Pacific. Incidents are detected by rules in the news unless marked curated."
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--e01e2aec-e24c-5526-9de9-ab86e8f61f14",
   "created": "2026-11-10T16:32:07.919Z",
   "modified": "2026-11-10T16:40:20.335Z",
   "name": "19 IP addresses behind recent hacking attacks against Korean financial institutions: watchdog",
   "description": "Detected automatically from 6 articles in 2 outlets (Korea Times, Yonhap), Oct 6 to Oct 9, 2026. Type: intrusion; sectors: government, financial services. Asia-Pacific countries affected: South Korea. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "intrusion",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/19-ip-addresses-behind-recent-hacking-attacks-against-korean-financial-20261006/"
    },
    {
     "source_name": "Yonhap",
     "url": "https://en.yna.co.kr/view/AEN20261006005000320",
     "description": "19 IP addresses behind recent hacking attacks against Korean financial institutions: watchdog"
    },
    {
     "source_name": "Yonhap",
     "url": "https://en.yna.co.kr/view/AEN20261006005051320",
     "description": "(LEAD) 28 IP addresses behind recent hacking attacks against Korean financial institutions: watchdog"
    },
    {
     "source_name": "Korea Times",
     "url": "https://www.koreatimes.co.kr/southkorea/law-crime/20261006/19-ip-addresses-behind-recent-hacking-attacks-against-korean-financial-institutions-watchdog?utm_source=rss",
     "description": "19 IP addresses behind recent hacking attacks against Korean financial institutions: watchdog"
    },
    {
     "source_name": "Korea Times",
     "url": "https://www.koreatimes.co.kr/southkorea/law-crime/20261006/28-ip-addresses-behind-recent-hacking-attacks-against-korean-financial-institutions-watchdog?utm_source=rss",
     "description": "28 IP addresses behind recent hacking attacks against Korean financial institutions: watchdog"
    },
    {
     "source_name": "Yonhap",
     "url": "https://en.yna.co.kr/view/AEN20261009003600315",
     "description": "Police expand team investigating recent hacking of financial institutions"
    },
    {
     "source_name": "Yonhap",
     "url": "https://en.yna.co.kr/view/AEN20261009003651315",
     "description": "(LEAD) Police expand team investigating recent hacking of financial institutions"
    }
   ],
   "x_securitystudies_occurred_on": "2026-10-06",
   "x_securitystudies_severity": 3,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [
    "Government",
    "Financial Services"
   ],
   "x_securitystudies_eu_relevance": "medium"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "location",
   "id": "location--81a671e7-38c1-562b-8b65-125fadcac6b4",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "South Korea",
   "country": "KR"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--342e01dd-fd32-5929-98e6-d047144faa8f",
   "created": "2026-11-10T16:32:07.919Z",
   "modified": "2026-11-10T16:32:07.919Z",
   "relationship_type": "related-to",
   "source_ref": "incident--e01e2aec-e24c-5526-9de9-ab86e8f61f14",
   "target_ref": "location--81a671e7-38c1-562b-8b65-125fadcac6b4",
   "description": "affected country"
  }
 ]
}