{
	"id": "885aa4bd-9822-4b7d-981a-674c05b876a7",
	"created_at": "2026-04-06T00:06:06.371882Z",
	"updated_at": "2026-04-10T13:12:11.020736Z",
	"deleted_at": null,
	"sha1_hash": "8100c3d3a465110c3e86a80e15b97fb12829e196",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 45225,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-05 22:36:17 UTC\n APT group: GoldenJackal\nNames GoldenJackal (Kaspersky)\nCountry [Unknown]\nMotivation Information theft and espionage\nFirst seen 2019\nDescription\n(Kaspersky) GoldenJackal is an APT group, active since 2019, that usually targets\ngovernment and diplomatic entities in the Middle East and South Asia. Despite the\nfact that they began their activities years ago, this group is generally unknown and,\nas far as we know, has not been publicly described.\nObserved\nSectors: Government and diplomatic entities.\nCountries: Afghanistan, Azerbaijan, Iran, Iraq, Pakistan, Turkey.\nTools used JackalControl, JackalPerInfo, JackalScreenWatcher, JackalSteal, JackalWorm.\nOperations performed 2022\nMind the (air) gap: GoldenJackal gooses government guardrails\nInformation Last change to this card: 24 October 2024\nDownload this actor card in PDF or JSON format\nSource: https://apt.etda.or.th/cgi-bin/showcard.cgi?u=b52e71cb-4ee3-414d-bc3e-de5bfdd7b830\nhttps://apt.etda.or.th/cgi-bin/showcard.cgi?u=b52e71cb-4ee3-414d-bc3e-de5bfdd7b830\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/showcard.cgi?u=b52e71cb-4ee3-414d-bc3e-de5bfdd7b830"
	],
	"report_names": [
		"showcard.cgi?u=b52e71cb-4ee3-414d-bc3e-de5bfdd7b830"
	],
	"threat_actors": [
		{
			"id": "a8356cf9-e9d6-4585-8ccf-d30d3efe142b",
			"created_at": "2023-06-23T02:04:34.262059Z",
			"updated_at": "2026-04-10T02:00:04.711064Z",
			"deleted_at": null,
			"main_name": "GoldenJackal",
			"aliases": [],
			"source_name": "ETDA:GoldenJackal",
			"tools": [
				"JackalControl",
				"JackalPerInfo",
				"JackalScreenWatcher",
				"JackalSteal",
				"JackalWorm"
			],
			"source_id": "ETDA",
			"reports": null
		},
		{
			"id": "bacb81f4-18d1-4dcd-b277-65a9dac41b61",
			"created_at": "2023-11-04T02:00:07.680044Z",
			"updated_at": "2026-04-10T02:00:03.390891Z",
			"deleted_at": null,
			"main_name": "GoldenJackal",
			"aliases": [],
			"source_name": "MISPGALAXY:GoldenJackal",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		}
	],
	"ts_created_at": 1775433966,
	"ts_updated_at": 1775826731,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/8100c3d3a465110c3e86a80e15b97fb12829e196.pdf",
		"text": "https://archive.orkl.eu/8100c3d3a465110c3e86a80e15b97fb12829e196.txt",
		"img": "https://archive.orkl.eu/8100c3d3a465110c3e86a80e15b97fb12829e196.jpg"
	}
}