{
	"id": "b3069f6f-080a-4a5b-9d64-51aedc8c10cc",
	"created_at": "2026-04-06T00:14:20.174311Z",
	"updated_at": "2026-04-10T13:12:02.582146Z",
	"deleted_at": null,
	"sha1_hash": "f496feabd578c2df24b9fa51f766c86c95d22592",
	"title": "Threat Group Cards: A Threat Actor Encyclopedia",
	"llm_title": "",
	"authors": "",
	"file_creation_date": "0001-01-01T00:00:00Z",
	"file_modification_date": "0001-01-01T00:00:00Z",
	"file_size": 46912,
	"plain_text": "Threat Group Cards: A Threat Actor Encyclopedia\nArchived: 2026-04-05 14:42:22 UTC\nHome \u003e List all groups \u003e List all tools \u003e List all groups using tool Chaes\n Tool: Chaes\nNames Chaes\nCategory Malware\nType Banking trojan, Info stealer, Credential stealer\nDescription\n(Cybereason) Chaes is designed to steal sensitive information from the browser such as\nlogin credentials, credit card numbers, and other financial information from\nMercadoLivre website customers. Chaes also takes screenshots of the infected machine,\nhooks and monitors the Chrome web browser to collect user information from infected\nhosts.\nInformation\nMITRE ATT\u0026CK Malpedia Last change to this tool card: 30 December 2022\nDownload this tool card in JSON format\nAll groups using tool Chaes\nChanged Name Country Observed\nUnknown groups\n _[ Interesting malware not linked to an actor yet ]_\n1 group listed (0 APT, 0 other, 1 unknown)\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=5621723b-329a-44d7-8a57-33799768ea64\nPage 1 of 2\n\nSource: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=5621723b-329a-44d7-8a57-33799768ea64\r\nhttps://apt.etda.or.th/cgi-bin/listgroups.cgi?u=5621723b-329a-44d7-8a57-33799768ea64\r\nPage 2 of 2\n\nUnknown groups _[ Interesting malware not linked to an actor yet ]_\n1 group listed (0 APT, 0 other, 1 unknown) \n   Page 1 of 2",
	"extraction_quality": 1,
	"language": "EN",
	"sources": [
		"ETDA"
	],
	"origins": [
		"web"
	],
	"references": [
		"https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=5621723b-329a-44d7-8a57-33799768ea64"
	],
	"report_names": [
		"listgroups.cgi?u=5621723b-329a-44d7-8a57-33799768ea64"
	],
	"threat_actors": [],
	"ts_created_at": 1775434460,
	"ts_updated_at": 1775826722,
	"ts_creation_date": 0,
	"ts_modification_date": 0,
	"files": {
		"pdf": "https://archive.orkl.eu/f496feabd578c2df24b9fa51f766c86c95d22592.pdf",
		"text": "https://archive.orkl.eu/f496feabd578c2df24b9fa51f766c86c95d22592.txt",
		"img": "https://archive.orkl.eu/f496feabd578c2df24b9fa51f766c86c95d22592.jpg"
	}
}