{
	"id": "3f8e52f1-a92e-42b5-a178-b55eeee1b72a",
	"created_at": "2026-04-06T00:17:39.183988Z",
	"updated_at": "2026-04-10T03:22:07.601823Z",
	"deleted_at": null,
	"sha1_hash": "f0f9c4b9c55a5035b6cddaadae436f055711d067",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 45304,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-05 18:33:19 UTC\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool Xenomorph\n Tool: Xenomorph\nNames Xenomorph\nCategory Malware\nType Banking trojan\nDescription\n(ThreatFabric) In February 2022, ThreatFabric came across a new Android banking Trojan,\nwhich we dubbed Xenomorph. The name comes from its clear ties with another infamous\nbanking Trojan, Alien, from which Xenomorph adopts class names and interesting strings.\nInformation\nMalpedia Last change to this tool card: 27 December 2022\nDownload this tool card in JSON format\nAll groups using tool Xenomorph\nChanged Name Country Observed\nUnknown groups\n _[ Interesting malware not linked to an actor yet ]_\n1 group listed (0 APT, 0 other, 1 unknown)\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=4fb95091-76ff-4578-afef-ea628ba087ab\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=4fb95091-76ff-4578-afef-ea628ba087ab\nPage 1 of 1",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=4fb95091-76ff-4578-afef-ea628ba087ab"
	],
	"report_names": [
		"listgroups.cgi?u=4fb95091-76ff-4578-afef-ea628ba087ab"
	],
	"threat_actors": [],
	"ts_created_at": 1775434659,
	"ts_updated_at": 1775791327,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/f0f9c4b9c55a5035b6cddaadae436f055711d067.pdf",
		"text": "https://archive.orkl.eu/f0f9c4b9c55a5035b6cddaadae436f055711d067.txt",
		"img": "https://archive.orkl.eu/f0f9c4b9c55a5035b6cddaadae436f055711d067.jpg"
	}
}