{"type":"bundle","id":"bundle--7175cb63-5ba5-57b5-bc1c-372541fe77b0","objects":[{"type":"intrusion-set","id":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"UNC1151","description":"Belarusian disinformation and credential-theft cluster aligned with Russian objectives.","aliases":["Ghostwriter","UAC-0107","Moustached Bouncer","Storm-0257","G0146","TA445","IRON VIKING"],"first_seen":"2016-01-01T00:00:00.000Z","external_references":[{"source_name":"APT Atlas","url":"https://aptatlas.net/actors/unc1151"},{"source_name":"mitre-attack","external_id":"G0146","url":"https://attack.mitre.org/groups/G0146/"}],"labels":["nation-state","dis","esp"]},{"type":"location","id":"location--04cd9956-7847-535f-b3f8-2c15fc015ff1","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"Albania","country":"AL","region":"europe"},{"type":"relationship","id":"relationship--9a462872-60db-52e4-bf77-5f656000a64a","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--04cd9956-7847-535f-b3f8-2c15fc015ff1"},{"type":"location","id":"location--2a0210fd-890b-5862-bd01-f2cd5e77b2a5","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"Belgium","country":"BE","region":"europe"},{"type":"relationship","id":"relationship--c8a70281-bd59-54a2-9815-16b0722fcc63","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--2a0210fd-890b-5862-bd01-f2cd5e77b2a5"},{"type":"location","id":"location--8c176808-7b2f-5f84-8da7-afd784257bed","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"Bulgaria","country":"BG","region":"europe"},{"type":"relationship","id":"relationship--82167882-f5d5-5dba-b424-468fa16184bd","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--8c176808-7b2f-5f84-8da7-afd784257bed"},{"type":"location","id":"location--df32d83f-5f4c-5118-a126-3f5c603db260","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"Canada","country":"CA","region":"americas"},{"type":"relationship","id":"relationship--b309e372-69bf-59ef-bc2d-26da8ded7fd6","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--df32d83f-5f4c-5118-a126-3f5c603db260"},{"type":"location","id":"location--28c31ddb-f375-5682-8697-e338a5f5d82f","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"Switzerland","country":"CH","region":"europe"},{"type":"relationship","id":"relationship--2d73309e-9d2f-5c59-8899-781ebbcd3102","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--28c31ddb-f375-5682-8697-e338a5f5d82f"},{"type":"location","id":"location--d8f97962-e60f-580e-80c7-bb324614e41b","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"Colombia","country":"CO","region":"americas"},{"type":"relationship","id":"relationship--41bfbf0f-50a9-5132-87fd-0d9f07d0e206","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--d8f97962-e60f-580e-80c7-bb324614e41b"},{"type":"location","id":"location--4a5069fe-25e6-586d-834e-c4723e81277a","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"Czechia","country":"CZ","region":"europe"},{"type":"relationship","id":"relationship--b7169e00-a817-52b9-bd02-2c4d639afd0e","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--4a5069fe-25e6-586d-834e-c4723e81277a"},{"type":"location","id":"location--7106d5fc-d11b-55da-9a5d-9e28f41d33da","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"Germany","country":"DE","region":"europe"},{"type":"relationship","id":"relationship--f56a2ed8-19be-5dd6-9aca-a1b12b297349","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--7106d5fc-d11b-55da-9a5d-9e28f41d33da"},{"type":"location","id":"location--bb45582d-2e27-5828-aa2f-343b24630f35","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"Denmark","country":"DK","region":"europe"},{"type":"relationship","id":"relationship--7f3d1d8e-c919-5c51-890f-4b24ff7c8f0a","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--bb45582d-2e27-5828-aa2f-343b24630f35"},{"type":"location","id":"location--52de829e-b12e-5fb1-98a4-0863af08b935","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"Estonia","country":"EE","region":"europe"},{"type":"relationship","id":"relationship--26c9702f-748f-58eb-bca5-6d27afdd5e58","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--52de829e-b12e-5fb1-98a4-0863af08b935"},{"type":"location","id":"location--a41caef2-fe04-5da5-bc82-ec135954366c","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"France","country":"FR","region":"europe"},{"type":"relationship","id":"relationship--fd831f4b-888d-50fe-9e6c-363d7a19886a","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--a41caef2-fe04-5da5-bc82-ec135954366c"},{"type":"location","id":"location--9cc80d10-4fe5-5958-aaea-36a6dcfef122","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"Greece","country":"GR","region":"europe"},{"type":"relationship","id":"relationship--f6aeb6d0-2ee4-5db7-b263-5ab514035186","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--9cc80d10-4fe5-5958-aaea-36a6dcfef122"},{"type":"location","id":"location--2eeaec7b-7dae-5258-a3f9-8196b80ad190","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"Croatia","country":"HR","region":"europe"},{"type":"relationship","id":"relationship--cda69c47-8b51-5826-933e-ff0f70f8228d","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--2eeaec7b-7dae-5258-a3f9-8196b80ad190"},{"type":"location","id":"location--382d5ccf-5b08-5a14-b75e-b8f55bfacbae","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"Hungary","country":"HU","region":"europe"},{"type":"relationship","id":"relationship--a536fc45-4764-5b98-9a88-03899ae14ae6","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--382d5ccf-5b08-5a14-b75e-b8f55bfacbae"},{"type":"location","id":"location--760995dc-62de-5ef6-9bc7-faf52bf1b952","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"Ireland","country":"IE","region":"europe"},{"type":"relationship","id":"relationship--1cce322c-5da5-5b8c-b477-e47dbbba7bd5","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--760995dc-62de-5ef6-9bc7-faf52bf1b952"},{"type":"location","id":"location--4b05be4b-827f-545b-9aa1-133bc2d3c383","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"Iceland","country":"IS","region":"europe"},{"type":"relationship","id":"relationship--0293c43a-96fc-5d3f-a8dc-928aba75c3c7","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--4b05be4b-827f-545b-9aa1-133bc2d3c383"},{"type":"location","id":"location--fd98b554-2d31-56db-8bc0-812e65009813","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"Italy","country":"IT","region":"europe"},{"type":"relationship","id":"relationship--046bfd6d-54e4-5be5-b249-408297ffe70f","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--fd98b554-2d31-56db-8bc0-812e65009813"},{"type":"location","id":"location--61b7a906-61ce-57da-ad39-490c0cca0f72","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"Lithuania","country":"LT","region":"europe"},{"type":"relationship","id":"relationship--016176d5-4094-5655-ba6b-90dba459bf50","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--61b7a906-61ce-57da-ad39-490c0cca0f72"},{"type":"location","id":"location--1faaca57-40f6-50ab-bfaa-f6975424db9a","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"Luxembourg","country":"LU","region":"europe"},{"type":"relationship","id":"relationship--f5204a85-d857-5425-bd5b-8511fc8c3a48","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--1faaca57-40f6-50ab-bfaa-f6975424db9a"},{"type":"location","id":"location--0cc52679-69d5-51c5-b375-66358567c08b","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"Latvia","country":"LV","region":"europe"},{"type":"relationship","id":"relationship--1aadfe75-bde3-5465-a9e4-fbf4c01f3a6d","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--0cc52679-69d5-51c5-b375-66358567c08b"},{"type":"location","id":"location--947724ed-c15a-532c-b2d0-82a6dc7ef55d","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"Montenegro","country":"ME","region":"europe"},{"type":"relationship","id":"relationship--aebed613-754f-5aca-bfcb-c26ee6c5ba62","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--947724ed-c15a-532c-b2d0-82a6dc7ef55d"},{"type":"location","id":"location--688e8d70-71a7-5dbf-9456-491580df260f","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"Netherlands","country":"NL","region":"europe"},{"type":"relationship","id":"relationship--8c96e45f-a7d2-5beb-a604-4c5f734e7fe3","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--688e8d70-71a7-5dbf-9456-491580df260f"},{"type":"location","id":"location--88c9fb6c-f398-559f-b18e-422cbb386901","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"Norway","country":"NO","region":"europe"},{"type":"relationship","id":"relationship--f0107e44-0ddc-5ba7-9cd7-e8437efea01b","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--88c9fb6c-f398-559f-b18e-422cbb386901"},{"type":"location","id":"location--28af571d-efb5-5547-b4c0-f5be348ac20a","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"Poland","country":"PL","region":"europe"},{"type":"relationship","id":"relationship--4639cff4-d6d6-55ff-8a92-d0e0beac8b0f","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--28af571d-efb5-5547-b4c0-f5be348ac20a"},{"type":"location","id":"location--2726446a-ddde-58f1-8c9f-cf66fe6fc18f","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","name":"Ukraine","country":"UA","region":"europe"},{"type":"relationship","id":"relationship--c45837cf-c381-52d7-bf55-80d2be3c4035","spec_version":"2.1","created":"2026-05-20T09:50:37.564809+00:00","modified":"2026-07-29T08:14:36.331+00:00","relationship_type":"targets","source_ref":"intrusion-set--3f713ee0-057a-5d2c-908d-508aeb4437da","target_ref":"location--2726446a-ddde-58f1-8c9f-cf66fe6fc18f"}]}