{
	"id": "25b09080-c71d-40c3-8d56-28577ba491c7",
	"created_at": "2026-04-06T00:18:45.098407Z",
	"updated_at": "2026-04-10T13:12:56.5369Z",
	"deleted_at": null,
	"sha1_hash": "cd53dae423204badc73416f496cb83e884560de0",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 48247,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-05 18:04:22 UTC\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool GlitchPOS\n Tool: GlitchPOS\nNames GlitchPOS\nCategory Malware\nType POS malware, Credential stealer\nDescription\n(Talos) Cisco Talos recently discovered a new PoS malware that the attackers are selling\non a crimeware forum. Our researchers also discovered the associated payloads with the\nmalware, its infrastructure and control panel. We assess with high confidence that this is\nnot the first malware developed by this actor. A few years ago, they were also pushing the\nDiamondFox L!NK botnet. Known as 'GlitchPOS,' this malware is also being distributed\non alternative websites at a higher price than the original.\nInformation\nMalpedia AlienVault OTX Last change to this tool card: 25 May 2020\nDownload this tool card in JSON format\nAll groups using tool GlitchPOS\nChanged Name Country Observed\nUnknown groups\n _[ Interesting malware not linked to an actor yet ]_\n1 group listed (0 APT, 0 other, 1 unknown)\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=94033974-8a80-4931-878d-9ef4ff495ccd\nPage 1 of 2\n\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=94033974-8a80-4931-878d-9ef4ff495ccd\r\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=94033974-8a80-4931-878d-9ef4ff495ccd\r\nPage 2 of 2\n\nUnknown groups _[ Interesting malware not linked to an actor yet ]_\n1 group listed (0 APT, 0 other, 1 unknown) \n   Page 1 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=94033974-8a80-4931-878d-9ef4ff495ccd"
	],
	"report_names": [
		"listgroups.cgi?u=94033974-8a80-4931-878d-9ef4ff495ccd"
	],
	"threat_actors": [],
	"ts_created_at": 1775434725,
	"ts_updated_at": 1775826776,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/cd53dae423204badc73416f496cb83e884560de0.pdf",
		"text": "https://archive.orkl.eu/cd53dae423204badc73416f496cb83e884560de0.txt",
		"img": "https://archive.orkl.eu/cd53dae423204badc73416f496cb83e884560de0.jpg"
	}
}