{
	"id": "b88a30eb-2aa1-449a-9aca-5420414055fa",
	"created_at": "2026-04-06T03:35:47.983787Z",
	"updated_at": "2026-04-10T13:11:24.101353Z",
	"deleted_at": null,
	"sha1_hash": "41679c31d8c091cdf136dfa43ecaa19df721f8e3",
	"title": "LevelBlue - Open Threat Exchange",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 346919,
	"plain_text": "LevelBlue - Open Threat Exchange\r\nBy msudosos\r\nArchived: 2026-04-06 03:11:03 UTC\r\nhttps://otx.alienvault.com/browse/pulses?q=tag:rawdisk\r\nPage 1 of 6\n\nCVE-2024-24919\r\nCVE: 2 | FileHash-MD5: 52 | FileHash-SHA1: 52 | FileHash-SHA256: 240 | URL: 3 | Domain: 7 | Email: 1 |\r\nHostname: 8\r\nhttps://otx.alienvault.com/browse/pulses?q=tag:rawdisk\r\nPage 2 of 6\n\nThis Is Unacceptable. #espionage\r\n41 Subscribers\r\nThreat Research | FireEye Inc\r\nhttps://otx.alienvault.com/browse/pulses?q=tag:rawdisk\r\nPage 3 of 6\n\nFind out more about FireEye.com, the world's leading cyber security company, which provides security services to\r\nmore than 1.5 million customers across the globe, and offers a wide range of products and services.\r\n17 Subscribers\r\nSecond Wave of Shamoon 2 Attacks Identified\r\nFileHash-SHA256: 4\r\nIn November 2016, we observed the reemergence of destructive attacks associated with the 2012 Shamoon attack\r\ncampaign. We covered this attack in detail in our blog titled Shamoon 2: Return of the Disttrack Wiper, which\r\ntargeted a single organization in Saudi Arabia and was set to wipe systems on November 17, 2016. Since our\r\nprevious publication, we have found another, similar but different payload used to target a second organization in\r\nSaudi Arabia that was configured to wipe systems twelve days later on November 29, 2016. This latest attack\r\npotentially materially impacts one of the primary countermeasures employed against wiper attacks: Virtual\r\nDesktop Interface snapshots.\r\n374,057 Subscribers\r\nhttps://otx.alienvault.com/browse/pulses?q=tag:rawdisk\r\nPage 4 of 6\n\nShamoon\r\nShamoon is back in Saudi Arabia\r\nhttps://otx.alienvault.com/browse/pulses?q=tag:rawdisk\r\nPage 5 of 6\n\n12 Subscribers\r\nSource: https://otx.alienvault.com/browse/pulses?q=tag:rawdisk\r\nhttps://otx.alienvault.com/browse/pulses?q=tag:rawdisk\r\nPage 6 of 6",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://otx.alienvault.com/browse/pulses?q=tag:rawdisk"
	],
	"report_names": [
		"pulses?q=tag:rawdisk"
	],
	"threat_actors": [],
	"ts_created_at": 1775446547,
	"ts_updated_at": 1775826684,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/41679c31d8c091cdf136dfa43ecaa19df721f8e3.pdf",
		"text": "https://archive.orkl.eu/41679c31d8c091cdf136dfa43ecaa19df721f8e3.txt",
		"img": "https://archive.orkl.eu/41679c31d8c091cdf136dfa43ecaa19df721f8e3.jpg"
	}
}