{
	"id": "1575ea72-c0fe-4dff-af52-547ea1bc2266",
	"created_at": "2026-04-06T00:16:03.132665Z",
	"updated_at": "2026-04-10T03:31:36.785048Z",
	"deleted_at": null,
	"sha1_hash": "dcad174c7a6d79c136b95517caa469d3240ce5ec",
	"title": "Tempting Cedar Spyware - Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 51004,
	"plain_text": "Tempting Cedar Spyware - Threat Group Cards: A Threat Actor\r\nEncyclopedia\r\nArchived: 2026-04-05 19:10:34 UTC\r\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool Tempting Cedar Spyware\r\n Tool: Tempting Cedar Spyware\r\nNames\r\nTempting Cedar Spyware\r\nTemptingCedar Spyware\r\nCategory Malware\r\nType Reconnaissance, Backdoor, Info stealer, Exfiltration\r\nDescription\r\n(Avast) Tempting Cedar Spyware was designed to steal information like contacts, call logs,\r\nSMS, and photos, as well as device information, like geolocation - in order to keep track of\r\nmovements - and was capable of recording surrounding sounds, including conversations\r\nvictims had while their phone was within range.\r\nInformation \u003chttps://blog.avast.com/avast-tracks-down-tempting-cedar-spyware\u003e\r\nMalpedia \u003chttps://malpedia.caad.fkie.fraunhofer.de/details/apk.tempting_cedar\u003e\r\nLast change to this tool card: 28 December 2022\r\nDownload this tool card in JSON format\r\nAll groups using tool Tempting Cedar Spyware\r\nChanged Name Country Observed\r\nAPT groups\r\n  Tempting Cedar Spyware 2015  \r\n1 group listed (1 APT, 0 other, 0 unknown)\r\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=63611218-2747-4e54-8f13-576573eadbd0\r\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=63611218-2747-4e54-8f13-576573eadbd0\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=63611218-2747-4e54-8f13-576573eadbd0"
	],
	"report_names": [
		"listgroups.cgi?u=63611218-2747-4e54-8f13-576573eadbd0"
	],
	"threat_actors": [
		{
			"id": "8aa5e5a6-87dd-4700-b5a2-11e08218132e",
			"created_at": "2022-10-25T16:07:24.316497Z",
			"updated_at": "2026-04-10T02:00:04.933194Z",
			"deleted_at": null,
			"main_name": "Tempting Cedar Spyware",
			"aliases": [],
			"source_name": "ETDA:Tempting Cedar Spyware",
			"tools": [
				"Tempting Cedar Spyware",
				"TemptingCedar Spyware"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434563,
	"ts_updated_at": 1775791896,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/dcad174c7a6d79c136b95517caa469d3240ce5ec.pdf",
		"text": "https://archive.orkl.eu/dcad174c7a6d79c136b95517caa469d3240ce5ec.txt",
		"img": "https://archive.orkl.eu/dcad174c7a6d79c136b95517caa469d3240ce5ec.jpg"
	}
}