{
	"id": "2574bea3-8658-46a9-b2dd-127abf16ed97",
	"created_at": "2026-04-06T00:10:49.718153Z",
	"updated_at": "2026-04-10T03:26:36.670765Z",
	"deleted_at": null,
	"sha1_hash": "0f856b242bdefeb32769db19ef6a3c68e310fd0d",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 46801,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-05 18:56:16 UTC\n APT group: Blackwood\nNames Blackwood (ESET)\nCountry China\nMotivation Information theft and espionage\nFirst seen 2018\nDescription\n(ESET) Blackwood is a China-aligned APT group active since at least 2018,\nengaging in cyberespionage operations against Chinese and Japanese individuals and\ncompanies. Blackwood has capabilities to conduct adversary-in-the-middle attacks\nto deliver the implant we named NSPX30 through updates of legitimate software,\nand to hide the location of its command and control servers by intercepting traffic\ngenerated by the implant.\nObserved\nSectors: Manufacturing.\nCountries: China, Japan, UK.\nTools used NSPX30.\nOperations performed Jan 2024\nBlackwood APT Group Has a New DLL Loader\nInformation\nLast change to this card: 06 March 2024\nDownload this actor card in PDF or JSON format\nSource: https://apt.etda.or.th/cgi-bin/showcard.cgi?u=6d70aaf2-6d2a-4578-b7d8-5c32edfa0024\nhttps://apt.etda.or.th/cgi-bin/showcard.cgi?u=6d70aaf2-6d2a-4578-b7d8-5c32edfa0024\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/showcard.cgi?u=6d70aaf2-6d2a-4578-b7d8-5c32edfa0024"
	],
	"report_names": [
		"showcard.cgi?u=6d70aaf2-6d2a-4578-b7d8-5c32edfa0024"
	],
	"threat_actors": [
		{
			"id": "c13153a4-8dda-4cc5-ac31-c9ca25f3563c",
			"created_at": "2024-02-01T02:00:04.227755Z",
			"updated_at": "2026-04-10T02:00:03.522787Z",
			"deleted_at": null,
			"main_name": "Blackwood",
			"aliases": [],
			"source_name": "MISPGALAXY:Blackwood",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "0770ba43-efad-4f73-a5e4-21621a5ac86e",
			"created_at": "2024-03-08T02:02:14.61239Z",
			"updated_at": "2026-04-10T02:00:04.585473Z",
			"deleted_at": null,
			"main_name": "Blackwood",
			"aliases": [],
			"source_name": "ETDA:Blackwood",
			"tools": [
				"NSPX30"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434249,
	"ts_updated_at": 1775791596,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/0f856b242bdefeb32769db19ef6a3c68e310fd0d.pdf",
		"text": "https://archive.orkl.eu/0f856b242bdefeb32769db19ef6a3c68e310fd0d.txt",
		"img": "https://archive.orkl.eu/0f856b242bdefeb32769db19ef6a3c68e310fd0d.jpg"
	}
}