{
	"id": "e7eac10c-722b-49a6-be85-8af0bb6e505c",
	"created_at": "2026-04-06T00:15:07.540082Z",
	"updated_at": "2026-04-10T13:11:39.172644Z",
	"deleted_at": null,
	"sha1_hash": "a12529bbb211976dd7a118a3dead72cb39d6829f",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 49454,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-05 22:02:08 UTC\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool Shylock\n Tool: Shylock\nNames\nShylock\nCaphaw\nCategory Malware\nType Banking trojan, Info stealer, Credential stealer\nDescription\n(Kaspersky) Shylock is a banking Trojan that was first discovered in 2011. It utilizes man-in-the-browser attacks designed to pilfer banking login credentials from the PCs of clients of a\npredetermined list of target organizations. Most of these organizations are banks, located in\ndifferent countries.\nInformation\nMalpedia Last change to this tool card: 14 May 2020\nDownload this tool card in JSON format\nAll groups using tool Shylock\nChanged Name Country Observed\nOther groups\n Shark Spider 2011-Jul 2014\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f60f1f4e-231c-4688-91bc-203c45d042cf\nPage 1 of 2\n\n1 group listed (0 APT, 1 other, 0 unknown)\r\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f60f1f4e-231c-4688-91bc-203c45d042cf\r\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f60f1f4e-231c-4688-91bc-203c45d042cf\r\nPage 2 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=f60f1f4e-231c-4688-91bc-203c45d042cf"
	],
	"report_names": [
		"listgroups.cgi?u=f60f1f4e-231c-4688-91bc-203c45d042cf"
	],
	"threat_actors": [
		{
			"id": "8ef9b0c2-4b2f-4991-890f-e4a661a906cc",
			"created_at": "2022-10-25T16:07:24.568124Z",
			"updated_at": "2026-04-10T02:00:05.035655Z",
			"deleted_at": null,
			"main_name": "Shark Spider",
			"aliases": [],
			"source_name": "ETDA:Shark Spider",
			"tools": [
				"Caphaw",
				"Shylock"
			],
			"source_id": "ETDA",
			"reports": null
		},
		{
			"id": "725828a3-40cd-432d-aaf0-024d157efd34",
			"created_at": "2023-01-06T13:46:38.420843Z",
			"updated_at": "2026-04-10T02:00:02.967363Z",
			"deleted_at": null,
			"main_name": "SHARK SPIDER",
			"aliases": [],
			"source_name": "MISPGALAXY:SHARK SPIDER",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		}
	],
	"ts_created_at": 1775434507,
	"ts_updated_at": 1775826699,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/a12529bbb211976dd7a118a3dead72cb39d6829f.pdf",
		"text": "https://archive.orkl.eu/a12529bbb211976dd7a118a3dead72cb39d6829f.txt",
		"img": "https://archive.orkl.eu/a12529bbb211976dd7a118a3dead72cb39d6829f.jpg"
	}
}