{
	"id": "c96fbb1b-f6db-43f0-a8e1-46b10c25e4fb",
	"created_at": "2026-04-06T00:17:25.215266Z",
	"updated_at": "2026-04-10T03:33:16.900594Z",
	"deleted_at": null,
	"sha1_hash": "078a9d636ab83cdc3e8cf45c3722bd4fe086e07d",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 49619,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-05 13:36:13 UTC\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool HummingWhale\n Tool: HummingWhale\nNames HummingWhale\nCategory Malware\nType Rootkit, Downloader\nDescription\n(Check Point) This new variant, dubbed ‘HummingWhale,’ includes new, cutting edge\ntechniques that allow it to perform ad fraud better than ever before.\nInformation MITRE ATT\u0026CK AlienVault OTX Last change to this tool card: 08 May 2020\nDownload this tool card in JSON format\nAll groups using tool HummingWhale\nChanged Name Country Observed\nOther groups\n Yingmob 2016-Jan 2017\n1 group listed (0 APT, 1 other, 0 unknown)\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=68ba015b-2d24-4c30-bc8c-82532a219c08\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=68ba015b-2d24-4c30-bc8c-82532a219c08\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=68ba015b-2d24-4c30-bc8c-82532a219c08"
	],
	"report_names": [
		"listgroups.cgi?u=68ba015b-2d24-4c30-bc8c-82532a219c08"
	],
	"threat_actors": [
		{
			"id": "45577352-1038-44a4-b111-44764d26a4b0",
			"created_at": "2022-10-25T16:07:24.591806Z",
			"updated_at": "2026-04-10T02:00:05.046659Z",
			"deleted_at": null,
			"main_name": "Yingmob",
			"aliases": [],
			"source_name": "ETDA:Yingmob",
			"tools": [
				"DroidPlugin",
				"Eomobi",
				"HummingBad",
				"HummingWhale",
				"Yispecter",
				"ZxxZ"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434645,
	"ts_updated_at": 1775791996,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/078a9d636ab83cdc3e8cf45c3722bd4fe086e07d.pdf",
		"text": "https://archive.orkl.eu/078a9d636ab83cdc3e8cf45c3722bd4fe086e07d.txt",
		"img": "https://archive.orkl.eu/078a9d636ab83cdc3e8cf45c3722bd4fe086e07d.jpg"
	}
}