{
	"id": "9c04eab2-f792-41e1-845a-90f2a0560ff1",
	"created_at": "2026-04-06T00:22:33.280681Z",
	"updated_at": "2026-04-10T03:28:40.035373Z",
	"deleted_at": null,
	"sha1_hash": "eb93a3deb9387f3849b0b2095ec14f211b39f6cc",
	"title": "Security | IBM",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 27526,
	"plain_text": "Security | IBM\r\nBy David Zax\r\nPublished: 2024-05-02 · Archived: 2026-04-05 12:42:37 UTC\r\nIBM web domains\r\nibm.com, ibm.org, ibm-zcouncil.com, insights-on-business.com, jazz.net, mobilebusinessinsights.com,\r\npromontory.com, proveit.com, ptech.org, s81c.com, securityintelligence.com, skillsbuild.org, softlayer.com,\r\nstoragecommunity.org, think-exchange.com, thoughtsoncloud.com, alphaevents.webcasts.com, ibm-cloud.github.io, ibmbigdatahub.com, bluemix.net, mybluemix.net, ibm.net, ibmcloud.com, galasa.dev,\r\nblueworkslive.com, swiss-quantum.ch, blueworkslive.com, cloudant.com, ibm.ie, ibm.fr, ibm.com.br, ibm.co,\r\nibm.ca, community.watsonanalytics.com, datapower.com, skills.yourlearning.ibm.com, bluewolf.com,\r\ncarbondesignsystem.com, openliberty.io\r\nSource: https://securityintelligence.com/brazil-cant-catch-a-break-after-panda-comes-the-sphinx/\r\nhttps://securityintelligence.com/brazil-cant-catch-a-break-after-panda-comes-the-sphinx/\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"Malpedia",
		"ETDA"
	],
	"references": [
		"https://securityintelligence.com/brazil-cant-catch-a-break-after-panda-comes-the-sphinx/"
	],
	"report_names": [
		"brazil-cant-catch-a-break-after-panda-comes-the-sphinx"
	],
	"threat_actors": [
		{
			"id": "e90ec9cb-9959-455d-b558-4bafef64d645",
			"created_at": "2022-10-25T16:07:24.222081Z",
			"updated_at": "2026-04-10T02:00:04.903184Z",
			"deleted_at": null,
			"main_name": "Sphinx",
			"aliases": [
				"APT-C-15"
			],
			"source_name": "ETDA:Sphinx",
			"tools": [
				"AnubisSpy",
				"Backdoor.Oldrea",
				"Bladabindi",
				"Fertger",
				"Havex",
				"Havex RAT",
				"Jorik",
				"Oldrea",
				"PEACEPIPE",
				"njRAT",
				"yellowalbatross"
			],
			"source_id": "ETDA",
			"reports": null
		}
	],
	"ts_created_at": 1775434953,
	"ts_updated_at": 1775791720,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/eb93a3deb9387f3849b0b2095ec14f211b39f6cc.pdf",
		"text": "https://archive.orkl.eu/eb93a3deb9387f3849b0b2095ec14f211b39f6cc.txt",
		"img": "https://archive.orkl.eu/eb93a3deb9387f3849b0b2095ec14f211b39f6cc.jpg"
	}
}