{
	"id": "6d4643f1-2a7a-4b56-88d1-af7b5f8196b1",
	"created_at": "2026-04-06T00:10:32.820737Z",
	"updated_at": "2026-04-10T03:20:39.410601Z",
	"deleted_at": null,
	"sha1_hash": "3d88b45f0f0ba1bf089ff7ed8e09d5d5798b9566",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 44791,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-05 18:44:44 UTC\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool Osiris\n Tool: Osiris\nNames Osiris\nCategory Malware\nType Banking trojan\nDescription\n(Check Point) Following our recent analysis of the Kronos banking Trojan, we discovered that\nKronos has also now been enhanced to hide its communication with C\u0026C server using Tor.\nWhile the author of Kronos continues to remain an issue of controversy, the new banking\nTrojan, Osiris, is thought to be primarily based on Kronos source code and most likely has the\nsame author.\nInformation Last change to this tool card: 16 May 2021\nDownload this tool card in JSON format\nAll groups using tool Osiris\nChanged Name Country Observed\nUnknown groups\n _[ Interesting malware not linked to an actor yet ]_\n1 group listed (0 APT, 0 other, 1 unknown)\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=01dd8748-1009-4768-8a1d-368dfc145c82\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=01dd8748-1009-4768-8a1d-368dfc145c82\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=01dd8748-1009-4768-8a1d-368dfc145c82"
	],
	"report_names": [
		"listgroups.cgi?u=01dd8748-1009-4768-8a1d-368dfc145c82"
	],
	"threat_actors": [],
	"ts_created_at": 1775434232,
	"ts_updated_at": 1775791239,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/3d88b45f0f0ba1bf089ff7ed8e09d5d5798b9566.pdf",
		"text": "https://archive.orkl.eu/3d88b45f0f0ba1bf089ff7ed8e09d5d5798b9566.txt",
		"img": "https://archive.orkl.eu/3d88b45f0f0ba1bf089ff7ed8e09d5d5798b9566.jpg"
	}
}