{
	"id": "a5c0b0d7-63bd-438b-abb3-001d7a4dfa58",
	"created_at": "2026-04-06T00:12:42.821491Z",
	"updated_at": "2026-04-10T03:28:39.959579Z",
	"deleted_at": null,
	"sha1_hash": "b73cb2b2465c110e300feb768ef6f8da14bf9f12",
	"title": "Security | IBM",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 27479,
	"plain_text": "Security | IBM\r\nBy David Zax\r\nPublished: 2024-05-02 · Archived: 2026-04-05 18:31:34 UTC\r\nIBM web domains\r\nibm.com, ibm.org, ibm-zcouncil.com, insights-on-business.com, jazz.net, mobilebusinessinsights.com,\r\npromontory.com, proveit.com, ptech.org, s81c.com, securityintelligence.com, skillsbuild.org, softlayer.com,\r\nstoragecommunity.org, think-exchange.com, thoughtsoncloud.com, alphaevents.webcasts.com, ibm-cloud.github.io, ibmbigdatahub.com, bluemix.net, mybluemix.net, ibm.net, ibmcloud.com, galasa.dev,\r\nblueworkslive.com, swiss-quantum.ch, blueworkslive.com, cloudant.com, ibm.ie, ibm.fr, ibm.com.br, ibm.co,\r\nibm.ca, community.watsonanalytics.com, datapower.com, skills.yourlearning.ibm.com, bluewolf.com,\r\ncarbondesignsystem.com, openliberty.io\r\nSource: https://securityintelligence.com/posts/zeus-sphinx-back-in-business-some-core-modifications-arise/\r\nhttps://securityintelligence.com/posts/zeus-sphinx-back-in-business-some-core-modifications-arise/\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"Malpedia",
		"ETDA"
	],
	"references": [
		"https://securityintelligence.com/posts/zeus-sphinx-back-in-business-some-core-modifications-arise/"
	],
	"report_names": [
		"zeus-sphinx-back-in-business-some-core-modifications-arise"
	],
	"threat_actors": [
		{
			"id": "e90ec9cb-9959-455d-b558-4bafef64d645",
			"created_at": "2022-10-25T16:07:24.222081Z",
			"updated_at": "2026-04-10T02:00:04.903184Z",
			"deleted_at": null,
			"main_name": "Sphinx",
			"aliases": [
				"APT-C-15"
			],
			"source_name": "ETDA:Sphinx",
			"tools": [
				"AnubisSpy",
				"Backdoor.Oldrea",
				"Bladabindi",
				"Fertger",
				"Havex",
				"Havex RAT",
				"Jorik",
				"Oldrea",
				"PEACEPIPE",
				"njRAT",
				"yellowalbatross"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434362,
	"ts_updated_at": 1775791719,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/b73cb2b2465c110e300feb768ef6f8da14bf9f12.pdf",
		"text": "https://archive.orkl.eu/b73cb2b2465c110e300feb768ef6f8da14bf9f12.txt",
		"img": "https://archive.orkl.eu/b73cb2b2465c110e300feb768ef6f8da14bf9f12.jpg"
	}
}