{
	"id": "0c91a9dd-1db4-4e1e-85d3-d8bbbd51bfc5",
	"created_at": "2026-04-06T00:08:00.076303Z",
	"updated_at": "2026-04-10T03:21:17.799333Z",
	"deleted_at": null,
	"sha1_hash": "3ef1f2369efe119c562d41888493c91b574e9c58",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 44610,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-05 13:08:54 UTC\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool Ajina\n Tool: Ajina\nNames Ajina\nCategory Malware\nType Banking trojan\nDescription\n(Group-IB) In May 2024, Group-IB analysts discovered suspicious activity targeting bank\ncustomers in the Central Asia region. The threat actors have been spreading malicious Android\nmalware designed to steal users’ personal and banking information, and potentially intercept\n2FA messages. During the investigation, Group-IB discovered .APK files masquerading as\nlegitimate applications that facilitated payments, banking, deliveries, and other daily uses.\nThese malicious files were spread across Telegram channels.\nInformation Last change to this tool card: 23 October 2024\nDownload this tool card in JSON format\nAll groups using tool Ajina\nChanged Name Country Observed\nUnknown groups\n _[ Interesting malware not linked to an actor yet ]_\n1 group listed (0 APT, 0 other, 1 unknown)\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=25a15f49-2dd7-4894-b7d9-2e6c3f1456db\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=25a15f49-2dd7-4894-b7d9-2e6c3f1456db\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=25a15f49-2dd7-4894-b7d9-2e6c3f1456db"
	],
	"report_names": [
		"listgroups.cgi?u=25a15f49-2dd7-4894-b7d9-2e6c3f1456db"
	],
	"threat_actors": [],
	"ts_created_at": 1775434080,
	"ts_updated_at": 1775791277,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/3ef1f2369efe119c562d41888493c91b574e9c58.pdf",
		"text": "https://archive.orkl.eu/3ef1f2369efe119c562d41888493c91b574e9c58.txt",
		"img": "https://archive.orkl.eu/3ef1f2369efe119c562d41888493c91b574e9c58.jpg"
	}
}