{
	"id": "dd4105d5-3df6-4aca-af22-cd777cd0e76d",
	"created_at": "2026-04-06T00:13:40.43614Z",
	"updated_at": "2026-04-10T13:12:31.426052Z",
	"deleted_at": null,
	"sha1_hash": "eefa44668d51c1b9a27c45c7fac91bcbe6510cae",
	"title": "Justice Wiper - Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 53091,
	"plain_text": "Justice Wiper - Threat Group Cards: A Threat Actor Encyclopedia\r\nArchived: 2026-04-05 20:31:17 UTC\r\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool No-Justice Wiper\r\n Tool: No-Justice Wiper\r\nNames\r\nNo-Justice Wiper\r\nLowEraser\r\nCategory Malware\r\nType Wiper\r\nDescription\r\n(ClearSky) During ClearSky’s dynamic analysis in a laboratory environment, the file crashed\r\nthe station on which it ran (bluescreen) and manipulated the operating system so that it won’t\r\nload when attempting to turn the machine on. It should be noted that the file requires elevated\r\n(admin) privileges to wipe the computer.\r\nInformation \u003chttps://www.clearskysec.com/wp-content/uploads/2024/01/No-Justice-Wiper.pdf\u003e\r\nLast change to this tool card: 18 June 2024\r\nDownload this tool card in JSON format\r\nAll groups using tool No-Justice Wiper\r\nChanged Name Country Observed\r\nAPT groups\r\n  HomeLand Justice 2022-Jan 2024  \r\n1 group listed (1 APT, 0 other, 0 unknown)\r\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=9dab318b-a320-4319-a935-c919bf4cd946\r\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=9dab318b-a320-4319-a935-c919bf4cd946\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=9dab318b-a320-4319-a935-c919bf4cd946"
	],
	"report_names": [
		"listgroups.cgi?u=9dab318b-a320-4319-a935-c919bf4cd946"
	],
	"threat_actors": [
		{
			"id": "7f25e108-e694-49b6-a494-c8458b33eb3f",
			"created_at": "2024-01-09T02:00:04.199217Z",
			"updated_at": "2026-04-10T02:00:03.509338Z",
			"deleted_at": null,
			"main_name": "HomeLand Justice",
			"aliases": [],
			"source_name": "MISPGALAXY:HomeLand Justice",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		},
		{
			"id": "20c759c2-cd02-45bb-85c6-41bde9e6a7cf",
			"created_at": "2024-01-18T02:02:34.189827Z",
			"updated_at": "2026-04-10T02:00:04.721082Z",
			"deleted_at": null,
			"main_name": "HomeLand Justice",
			"aliases": [
				"Banished Kitten",
				"Karma",
				"Red Sandstorm",
				"Storm-0842",
				"Void Manticore"
			],
			"source_name": "ETDA:HomeLand Justice",
			"tools": [
				"BABYWIPER",
				"BiBi Wiper",
				"BiBi-Linux Wiper",
				"BiBi-Windows Wiper",
				"Cl Wiper",
				"LowEraser",
				"No-Justice Wiper",
				"Plink",
				"PuTTY Link",
				"RevSocks",
				"W2K Res Kit"
			],
			"source_id": "ETDA",
			"reports": null
		},
		{
			"id": "b3ebf51d-8f64-48a9-bbfb-674db872cccb",
			"created_at": "2025-08-07T02:03:24.769383Z",
			"updated_at": "2026-04-10T02:00:03.860954Z",
			"deleted_at": null,
			"main_name": "COBALT MYSTIQUE",
			"aliases": [
				"Banished Kitten ",
				"DEV-0842 ",
				"Druidfly ",
				"Handala Hack Team",
				"Homeland Justice",
				"Karmabelow80",
				"Red Sandstorm ",
				"Storm-0842 ",
				"Void Manticore "
			],
			"source_name": "Secureworks:COBALT MYSTIQUE",
			"tools": [
				"AllinOneNeo",
				"Bibi",
				"GramPy",
				"GramPyLoader"
			],
			"source_id": "Secureworks",
			"reports": null
		}
	],
	"ts_created_at": 1775434420,
	"ts_updated_at": 1775826751,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/eefa44668d51c1b9a27c45c7fac91bcbe6510cae.pdf",
		"text": "https://archive.orkl.eu/eefa44668d51c1b9a27c45c7fac91bcbe6510cae.txt",
		"img": "https://archive.orkl.eu/eefa44668d51c1b9a27c45c7fac91bcbe6510cae.jpg"
	}
}