{
	"id": "23450365-577e-453d-936d-ef707410e74b",
	"created_at": "2026-04-06T00:11:14.201019Z",
	"updated_at": "2026-04-10T03:22:03.924501Z",
	"deleted_at": null,
	"sha1_hash": "4f9121b76293d81e19f8b0317f8280b3327b892f",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 44234,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-05 20:08:48 UTC\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool SpyAgent\n Tool: SpyAgent\nNames SpyAgent\nCategory Malware\nType Backdoor, Info stealer\nDescription\n(IBM) A new Android malware strain known as SpyAgent is making the rounds — and\nstealing screenshots as it goes. Using optical character recognition (OCR) technology, the\nmalware is after cryptocurrency recovery phrases often stored in screenshots on user devices.\nInformation\nLast change to this tool card: 26 December 2024\nDownload this tool card in JSON format\nAll groups using tool SpyAgent\nChanged Name Country Observed\nUnknown groups\n _[ Interesting malware not linked to an actor yet ]_\n1 group listed (0 APT, 0 other, 1 unknown)\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=d8873190-b495-4c79-b647-e62187601801\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=d8873190-b495-4c79-b647-e62187601801\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=d8873190-b495-4c79-b647-e62187601801"
	],
	"report_names": [
		"listgroups.cgi?u=d8873190-b495-4c79-b647-e62187601801"
	],
	"threat_actors": [],
	"ts_created_at": 1775434274,
	"ts_updated_at": 1775791323,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/4f9121b76293d81e19f8b0317f8280b3327b892f.pdf",
		"text": "https://archive.orkl.eu/4f9121b76293d81e19f8b0317f8280b3327b892f.txt",
		"img": "https://archive.orkl.eu/4f9121b76293d81e19f8b0317f8280b3327b892f.jpg"
	}
}