{
	"id": "ac8f2988-3a38-47b5-8cbf-ec565beaf4bc",
	"created_at": "2026-04-06T00:11:49.491144Z",
	"updated_at": "2026-04-10T03:26:21.873914Z",
	"deleted_at": null,
	"sha1_hash": "8a0934c2cf2afbc5ace59c24d5d0fd8c9b5e0921",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 47184,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\r\nArchived: 2026-04-05 13:27:08 UTC\r\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool TcpBridge\r\n Tool: TcpBridge\r\nNames TcpBridge\r\nCategory Malware\r\nType Tunneling\r\nDescription\r\n(Bitdefender) This tool is used to obtain access to the internal network of the victim.\r\nThe IP address to which the tool connects is assigned to the attacker’s server that sends to the\r\ntool commands to connect to a given IP address and to push incoming traffic through that\r\nconnection and to send back the outcoming data.\r\nInformation\r\n\u003chttps://www.bitdefender.com/files/News/CaseStudies/study/379/Bitdefender-Whitepaper-Chinese-APT.pdf\u003e\r\nLast change to this tool card: 06 January 2021\r\nDownload this tool card in JSON format\r\nAll groups using tool TcpBridge\r\nChanged Name Country Observed\r\nAPT groups\r\n  FunnyDream 2018  \r\n1 group listed (1 APT, 0 other, 0 unknown)\r\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=31a34e20-1c34-45d3-8b71-a7be5f7833dd\r\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=31a34e20-1c34-45d3-8b71-a7be5f7833dd\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=31a34e20-1c34-45d3-8b71-a7be5f7833dd"
	],
	"report_names": [
		"listgroups.cgi?u=31a34e20-1c34-45d3-8b71-a7be5f7833dd"
	],
	"threat_actors": [
		{
			"id": "b98eb1ec-dc8b-4aea-b112-9e485408dd14",
			"created_at": "2022-10-25T16:07:23.649308Z",
			"updated_at": "2026-04-10T02:00:04.701157Z",
			"deleted_at": null,
			"main_name": "FunnyDream",
			"aliases": [
				"Bronze Edgewood",
				"Red Hariasa",
				"TAG-16"
			],
			"source_name": "ETDA:FunnyDream",
			"tools": [
				"Chinoxy",
				"Filepak",
				"FilepakMonitor",
				"FunnyDream",
				"Keyrecord",
				"LOLBAS",
				"LOLBins",
				"Living off the Land",
				"Md_client",
				"PCShare",
				"ScreenCap",
				"TcpBridge",
				"Tcp_transfer",
				"ccf32"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434309,
	"ts_updated_at": 1775791581,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/8a0934c2cf2afbc5ace59c24d5d0fd8c9b5e0921.pdf",
		"text": "https://archive.orkl.eu/8a0934c2cf2afbc5ace59c24d5d0fd8c9b5e0921.txt",
		"img": "https://archive.orkl.eu/8a0934c2cf2afbc5ace59c24d5d0fd8c9b5e0921.jpg"
	}
}