{
	"id": "86c3e48f-ba8a-4acc-a2a4-ea2870e71feb",
	"created_at": "2026-04-06T00:08:24.055191Z",
	"updated_at": "2026-04-10T03:20:56.80581Z",
	"deleted_at": null,
	"sha1_hash": "efa587b5e189758b868bb8740b70d4b310f1c53e",
	"title": "The Golden Tax Department and Emergence of GoldenSpy Malware | LevelBlue",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 31659,
	"plain_text": "The Golden Tax Department and Emergence of GoldenSpy\r\nMalware | LevelBlue\r\nArchived: 2026-04-05 16:04:26 UTC\r\nLevelBlue SpiderLabs threat hunting experts investigate a malware campaign targeting corporations\r\noperating in China. This report identifies a new threat and provides specific hunting, investigative, and\r\nremediation methodologies that can be used to help ensure your environment is clean.\r\nUse this information to empower your organization, if you have operations in China or are planning to start\r\noperations there, to fight this unattributed threat actor group today, with sections covering:\r\nThe Golden Tax Department and Emergence of GoldenSpy Malware\r\nAssociated Indicators of Compromise (IOC’s) and IOC’s associated with the network architecture used\r\nwith this threat\r\nMalware analysis and malware reverse engineering reports\r\nRecommended risk mitigation measures\r\nSource: https://www.trustwave.com/en-us/resources/library/documents/the-golden-tax-department-and-the-emergence-of-goldenspy-malware/\r\nhttps://www.trustwave.com/en-us/resources/library/documents/the-golden-tax-department-and-the-emergence-of-goldenspy-malware/\r\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"MITRE"
	],
	"references": [
		"https://www.trustwave.com/en-us/resources/library/documents/the-golden-tax-department-and-the-emergence-of-goldenspy-malware/"
	],
	"report_names": [
		"the-golden-tax-department-and-the-emergence-of-goldenspy-malware"
	],
	"threat_actors": [],
	"ts_created_at": 1775434104,
	"ts_updated_at": 1775791256,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/efa587b5e189758b868bb8740b70d4b310f1c53e.pdf",
		"text": "https://archive.orkl.eu/efa587b5e189758b868bb8740b70d4b310f1c53e.txt",
		"img": "https://archive.orkl.eu/efa587b5e189758b868bb8740b70d4b310f1c53e.jpg"
	}
}