{
	"id": "6d9ad34a-ce2b-409d-af85-69898a129a28",
	"created_at": "2026-04-06T00:18:50.908398Z",
	"updated_at": "2026-04-10T03:30:46.292033Z",
	"deleted_at": null,
	"sha1_hash": "646e6c0a3685aeaf2ada8081f25b4e25dc23ec9d",
	"title": "Union Spider - Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 37739,
	"plain_text": "Union Spider - Threat Group Cards: A Threat Actor Encyclopedia\r\nArchived: 2026-04-05 18:41:55 UTC\r\nUnknown group: Union Spider\r\nNames Union Spider (CrowdStrike)\r\nCountry [Unknown]\r\nDescription A threat actor mentioned in a summary report only, so we don't know who they are yet.\r\nInformation\r\n\u003chttp://www.rsaconference.com/writable/presentations/file_upload/anf-t07b-the-art-of-attribution-identifying-and-pursuing-your-cyber-adversaries_final.pdf\u003e\r\nLast change to this card: 19 April 2020\r\n↑\r\nSource: https://apt.etda.or.th/cgi-bin/showcard.cgi?u=1feb3bc8-115c-4af1-b826-ca58aed4dd5a\r\nhttps://apt.etda.or.th/cgi-bin/showcard.cgi?u=1feb3bc8-115c-4af1-b826-ca58aed4dd5a\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/showcard.cgi?u=1feb3bc8-115c-4af1-b826-ca58aed4dd5a"
	],
	"report_names": [
		"showcard.cgi?u=1feb3bc8-115c-4af1-b826-ca58aed4dd5a"
	],
	"threat_actors": [
		{
			"id": "9a35fd39-5cf7-409d-9f6f-b0e116b35b80",
			"created_at": "2023-01-06T13:46:38.424266Z",
			"updated_at": "2026-04-10T02:00:02.968584Z",
			"deleted_at": null,
			"main_name": "UNION SPIDER",
			"aliases": [],
			"source_name": "MISPGALAXY:UNION SPIDER",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "cddd78da-8a8f-43b8-8ef5-9722bc5c46ba",
			"created_at": "2022-10-25T16:07:23.290787Z",
			"updated_at": "2026-04-10T02:00:04.521495Z",
			"deleted_at": null,
			"main_name": "Union Spider",
			"aliases": [],
			"source_name": "ETDA:Union Spider",
			"tools": [],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434730,
	"ts_updated_at": 1775791846,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/646e6c0a3685aeaf2ada8081f25b4e25dc23ec9d.pdf",
		"text": "https://archive.orkl.eu/646e6c0a3685aeaf2ada8081f25b4e25dc23ec9d.txt",
		"img": "https://archive.orkl.eu/646e6c0a3685aeaf2ada8081f25b4e25dc23ec9d.jpg"
	}
}