{
	"id": "759d36af-a46c-4863-8cd9-5bdd120cea90",
	"created_at": "2026-04-06T00:10:56.436385Z",
	"updated_at": "2026-04-10T03:35:10.557132Z",
	"deleted_at": null,
	"sha1_hash": "f0bf1b24dc7ce8bec233f1f20613c44547e71447",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 42540,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-05 17:56:46 UTC\n APT group: WildPressure\nNames WilePressure (Kaspersky)\nCountry [Unknown]\nMotivation Information theft and espionage\nFirst seen 2019\nDescription\n(Kaspersky) In August 2019, Kaspersky discovered a malicious campaign\ndistributing a fully fledged C++ Trojan that we call Milum. All the victims we\nregistered were organizations from the Middle East. At least some of them are\nrelated to industrial sector. Our Kaspersky Threat Attribution Engine (KTAE)\ndoesn’t show any code similarities with known campaigns. Nor have we seen any\ntarget intersections. In fact, we found just three almost unique samples, all in one\ncountry. So we consider the attacks to be targeted and have currently named this\noperation WildPressure.\nObserved\nSectors: Industrial, Oil and gas.\nCountries: Middle East.\nTools used Milum.\nOperations performed Spring 2021\nWildPressure targets the macOS platform\nInformation Last change to this card: 09 August 2021\nDownload this actor card in PDF or JSON format\nSource: https://apt.etda.or.th/cgi-bin/showcard.cgi?u=d89b8e99-b7bf-42bb-aa53-82954e599395\nhttps://apt.etda.or.th/cgi-bin/showcard.cgi?u=d89b8e99-b7bf-42bb-aa53-82954e599395\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/showcard.cgi?u=d89b8e99-b7bf-42bb-aa53-82954e599395"
	],
	"report_names": [
		"showcard.cgi?u=d89b8e99-b7bf-42bb-aa53-82954e599395"
	],
	"threat_actors": [
		{
			"id": "c3ef437d-e8fa-4250-9a99-89a403035ad2",
			"created_at": "2022-10-25T16:07:24.406019Z",
			"updated_at": "2026-04-10T02:00:04.977275Z",
			"deleted_at": null,
			"main_name": "WildPressure",
			"aliases": [
				"WilePressure"
			],
			"source_name": "ETDA:WildPressure",
			"tools": [
				"Milum"
			],
			"source_id": "ETDA",
			"reports": null
		},
		{
			"id": "3c652e4b-2f17-4e18-bd05-af12c27e76fb",
			"created_at": "2023-11-30T02:00:07.302263Z",
			"updated_at": "2026-04-10T02:00:03.485667Z",
			"deleted_at": null,
			"main_name": "WildPressure",
			"aliases": [],
			"source_name": "MISPGALAXY:WildPressure",
			"tools": [],
			"source_id": "MISPGALAXY",
			"reports": null
		}
	],
	"ts_created_at": 1775434256,
	"ts_updated_at": 1775792110,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/f0bf1b24dc7ce8bec233f1f20613c44547e71447.pdf",
		"text": "https://archive.orkl.eu/f0bf1b24dc7ce8bec233f1f20613c44547e71447.txt",
		"img": "https://archive.orkl.eu/f0bf1b24dc7ce8bec233f1f20613c44547e71447.jpg"
	}
}