{
	"id": "d301cb7a-ae08-4c28-aaa2-9f5e4d1fe6e8",
	"created_at": "2026-04-06T00:11:44.21204Z",
	"updated_at": "2026-04-10T03:20:54.917978Z",
	"deleted_at": null,
	"sha1_hash": "09bc5fe9a9c81b6d8dee650872894445e1fd1bf4",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 47399,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-05 14:14:33 UTC\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool AcidPour\n Tool: AcidPour\nNames AcidPour\nCategory Malware\nType Wiper\nDescription\n(SentinelOne) On March 16th, 2024, we identified a suspicious Linux binary uploaded\nfrom Ukraine. Initial analysis showed surface similarities with the infamous AcidRain\nwiper used to disable KA-SAT modems across Europe at the start of the Russian\ninvasion of Ukraine (commonly identified by the ‘Viasat hack’ misnomer). Since our\ninitial finding, no similar samples or variants have been detected or publicly reported\nuntil now. This new sample is a confirmed variant we refer to as ‘AcidPour’, a wiper\nwith similar and expanded capabilities.\nInformation\nMITRE ATT\u0026CK Malpedia Last change to this tool card: 28 June 2025\nDownload this tool card in JSON format\nAll groups using tool AcidPour\nChanged Name Country Observed\nUnknown groups\n _[ Interesting malware not linked to an actor yet ]_\n1 group listed (0 APT, 0 other, 1 unknown)\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=9ccc7961-d80b-4406-b644-214e82cdf048\nPage 1 of 2\n\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=9ccc7961-d80b-4406-b644-214e82cdf048\r\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=9ccc7961-d80b-4406-b644-214e82cdf048\r\nPage 2 of 2\n\nUnknown groups _[ Interesting malware not linked to an actor yet ]_\n1 group listed (0 APT, 0 other, 1 unknown) \n   Page 1 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=9ccc7961-d80b-4406-b644-214e82cdf048"
	],
	"report_names": [
		"listgroups.cgi?u=9ccc7961-d80b-4406-b644-214e82cdf048"
	],
	"threat_actors": [],
	"ts_created_at": 1775434304,
	"ts_updated_at": 1775791254,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/09bc5fe9a9c81b6d8dee650872894445e1fd1bf4.pdf",
		"text": "https://archive.orkl.eu/09bc5fe9a9c81b6d8dee650872894445e1fd1bf4.txt",
		"img": "https://archive.orkl.eu/09bc5fe9a9c81b6d8dee650872894445e1fd1bf4.jpg"
	}
}