{
	"id": "125ddb7d-04f1-4723-950b-20b8878de06d",
	"created_at": "2026-04-06T00:21:04.491387Z",
	"updated_at": "2026-04-10T13:13:00.224038Z",
	"deleted_at": null,
	"sha1_hash": "35358274363daac4395a22a267b3f078db5c00af",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 46628,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-05 15:53:06 UTC\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool Zanubis\n Tool: Zanubis\nNames Zanubis\nCategory Malware\nType Banking trojan, Backdoor\nDescription\n(Kaspersky) Zanubis, an Android banking trojan, first appeared around August 2022, targeting\nfinancial institution and cryptocurrency exchange users in Peru. Zanubis’s main infection path\nis through impersonating legitimate Peruvian Android applications and then tricking the user\ninto enabling the Accessibility permissions in order to take full control of the device.\nInformation\nMalpedia Last change to this tool card: 27 June 2025\nDownload this tool card in JSON format\nAll groups using tool Zanubis\nChanged Name Country Observed\nUnknown groups\n _[ Interesting malware not linked to an actor yet ]_\n1 group listed (0 APT, 0 other, 1 unknown)\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=5e966ae8-d9a5-479a-ba65-6700494dc778\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=5e966ae8-d9a5-479a-ba65-6700494dc778\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=5e966ae8-d9a5-479a-ba65-6700494dc778"
	],
	"report_names": [
		"listgroups.cgi?u=5e966ae8-d9a5-479a-ba65-6700494dc778"
	],
	"threat_actors": [],
	"ts_created_at": 1775434864,
	"ts_updated_at": 1775826780,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/35358274363daac4395a22a267b3f078db5c00af.pdf",
		"text": "https://archive.orkl.eu/35358274363daac4395a22a267b3f078db5c00af.txt",
		"img": "https://archive.orkl.eu/35358274363daac4395a22a267b3f078db5c00af.jpg"
	}
}