{
	"id": "1a672703-3765-4144-a768-a921d0a312fd",
	"created_at": "2026-04-06T00:12:55.820197Z",
	"updated_at": "2026-04-10T13:13:07.878492Z",
	"deleted_at": null,
	"sha1_hash": "c497f632cf0fa27c0090971a6b80932575bb19a3",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 45063,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-05 14:15:41 UTC\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool GoldDigger\n Tool: GoldDigger\nNames GoldDigger\nCategory Malware\nType Banking trojan\nDescription\n(Group-IB) Codenamed GoldDigger by Group-IB’s Threat Intelligence unit, the Trojan has\nbeen active since at least June 2023. The malicious application impersonates a Vietnamese\ngovernment portal and an energy company and abuses the Android Accessibility service to\nextract personal information, steal banking app credentials, intercept SMS messages, and\nperform various user actions. The number of infected devices and the amount stolen remains\nunknown.\nInformation Malpedia Last change to this tool card: 07 March 2024\nDownload this tool card in JSON format\nAll groups using tool GoldDigger\nChanged Name Country Observed\nUnknown groups\n _[ Interesting malware not linked to an actor yet ]_\n1 group listed (0 APT, 0 other, 1 unknown)\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=3695f51b-e7ca-44fb-a187-3299950ff6f2\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=3695f51b-e7ca-44fb-a187-3299950ff6f2\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=3695f51b-e7ca-44fb-a187-3299950ff6f2"
	],
	"report_names": [
		"listgroups.cgi?u=3695f51b-e7ca-44fb-a187-3299950ff6f2"
	],
	"threat_actors": [],
	"ts_created_at": 1775434375,
	"ts_updated_at": 1775826787,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/c497f632cf0fa27c0090971a6b80932575bb19a3.pdf",
		"text": "https://archive.orkl.eu/c497f632cf0fa27c0090971a6b80932575bb19a3.txt",
		"img": "https://archive.orkl.eu/c497f632cf0fa27c0090971a6b80932575bb19a3.jpg"
	}
}