[
    {
        "date": "2026-05-31 03:39:00",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "update.nstlog.store",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2060929060491186254"
    },
    {
        "date": "2026-05-31 03:39:00",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://update.nstlog.store/binan_woo/bootservice.php",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2060929060491186254"
    },
    {
        "date": "2026-05-31 03:39:00",
        "user": "byrne_emmy12099",
        "type": "sha256",
        "value": "bc0fe921f3dae89df12adbd034ff58b875223dd3c3119aba6eaa023ad818d653",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2060929060491186254"
    },
    {
        "date": "2026-06-01 18:00:00",
        "user": "phatomcandle",
        "type": "domain",
        "value": "nid-naverbzb.ddnsking.com",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2061508091292823680"
    },
    {
        "date": "2026-06-01 18:00:00",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://nid-naverbzb.ddnsking.com",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2061508091292823680"
    },
    {
        "date": "2026-06-01 18:00:00",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://27.102.137.150",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2061508091292823680"
    },
    {
        "date": "2026-06-01 18:00:00",
        "user": "phatomcandle",
        "type": "ip",
        "value": "27.102.137.150",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2061508091292823680"
    },
    {
        "date": "2026-06-02 18:00:00",
        "user": "phatomcandle",
        "type": "domain",
        "value": "nid-naverqpo.servegame.com",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2061870478818738211"
    },
    {
        "date": "2026-06-02 18:00:00",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://nid-naverqpo.servegame.com",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2061870478818738211"
    },
    {
        "date": "2026-06-02 18:00:00",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://27.102.137.150",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2061870478818738211"
    },
    {
        "date": "2026-06-02 18:00:00",
        "user": "phatomcandle",
        "type": "ip",
        "value": "27.102.137.150",
        "tags": [
            "#APT",
            "#C2",
            "#Kimsuky",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2061870478818738211"
    },
    {
        "date": "2026-06-03 01:17:00",
        "user": "byrne_emmy12099",
        "type": "sha256",
        "value": "5003943f4c46221b5eed7f6ebc4036dace496b40786fc5d9a712dd057bfacee4",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2061980470548861223"
    },
    {
        "date": "2026-06-04 11:52:00",
        "user": "byrne_emmy12099",
        "type": "sha256",
        "value": "9be8f2be7ad882e8423c269a0540b7c73d6470311ddfcfcd318ff9d1983e2935",
        "tags": [
            "#APT",
            "#Kimsuky"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2062502763880390851"
    },
    {
        "date": "2026-06-04 18:00:00",
        "user": "phatomcandle",
        "type": "md5",
        "value": "634cc3b70c1ce977c70ed99cbe3ed6fc",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2062595256554836356"
    },
    {
        "date": "2026-06-04 18:00:00",
        "user": "phatomcandle",
        "type": "sha256",
        "value": "277a61ad26ec83aee8ee65169b431afc48220e7988e09971a3dc71723a9497c8",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2062595256554836356"
    },
    {
        "date": "2026-06-05 10:22:00",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "inini.kesug.com",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2062842425765412976"
    },
    {
        "date": "2026-06-05 10:22:00",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://inini.kesug.com/maith.php",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2062842425765412976"
    },
    {
        "date": "2026-06-05 10:22:00",
        "user": "byrne_emmy12099",
        "type": "sha256",
        "value": "37933abc647813d1ddb8b780f7bebf50ec09fc6179e4ef43a20b1734a4af46ef",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2062842425765412976"
    },
    {
        "date": "2026-06-05 18:00:00",
        "user": "phatomcandle",
        "type": "md5",
        "value": "06c67c7f46931c4c4877bb6c2dac5869",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2062957643124400440"
    },
    {
        "date": "2026-06-05 18:00:00",
        "user": "phatomcandle",
        "type": "sha256",
        "value": "413ea66c492b5df8ce7a51c2866a9e24c3182a5fbbe38016bd268f87daf54fdd",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2062957643124400440"
    },
    {
        "date": "2026-06-06 18:00:00",
        "user": "phatomcandle",
        "type": "md5",
        "value": "06c67c7f46931c4c4877bb6c2dac5869",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2063320030788595937"
    },
    {
        "date": "2026-06-06 18:00:00",
        "user": "phatomcandle",
        "type": "sha256",
        "value": "413ea66c492b5df8ce7a51c2866a9e24c3182a5fbbe38016bd268f87daf54fdd",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2063320030788595937"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://46.226.166.45",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://66.78.40.107",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://45.61.136.7",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://199.91.220.216",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://146.19.254.84",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://94.26.90.100",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://199.217.99.189",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://199.91.220.142",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://23.227.196.107",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://2.26.119.58",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://144.31.236.42",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://144.31.236.41",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "domain",
        "value": "prod.ms-telemetry-gateway-us.com",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://prod.ms-telemetry-gateway-us.com",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "domain",
        "value": "ms-telemetry-gateway-us.com",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://ms-telemetry-gateway-us.com",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "domain",
        "value": "aviaflightsbest.com",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://aviaflightsbest.com",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://www.aviaflightsbest.com",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "domain",
        "value": "annaionovna.com",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://annaionovna.com",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "domain",
        "value": "landmas.info",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://www.landmas.info",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "domain",
        "value": "dakatawebstick.com",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://dakatawebstick.com",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "domain",
        "value": "ashpaltlonpro.com",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://ashpaltlonpro.com",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "domain",
        "value": "biteatits.surf",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://biteatits.surf",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "domain",
        "value": "diaonline.website",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://diaonline.website",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "domain",
        "value": "et-crareturn.ca",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://et-crareturn.ca",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "domain",
        "value": "admiralkolchak.com",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://admiralkolchak.com",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "domain",
        "value": "lavrentiyberia.com",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://lavrentiyberia.com",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "ip",
        "value": "46.226.166.45",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "ip",
        "value": "66.78.40.107",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "ip",
        "value": "45.61.136.7",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "ip",
        "value": "199.91.220.216",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "ip",
        "value": "146.19.254.84",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "ip",
        "value": "94.26.90.100",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "ip",
        "value": "199.217.99.189",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "ip",
        "value": "199.91.220.142",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "ip",
        "value": "23.227.196.107",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "ip",
        "value": "2.26.119.58",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "ip",
        "value": "144.31.236.42",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "ip",
        "value": "144.31.236.41",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "sha256",
        "value": "bbcc6c5249d8e8f9d52e031fabb38a42469b57526f997fb06483581e360fe3a0",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 08:32:00",
        "user": "skocherhan",
        "type": "sha256",
        "value": "cbd018a884e5314f5fb1cebf973012d7c420c6d0f633aeda37dfeff3cd739e61",
        "tags": [
            "#APT",
            "#C2"
        ],
        "tweet": "https://x.com/skocherhan/status/2063539578980417973"
    },
    {
        "date": "2026-06-07 17:55:00",
        "user": "G60930953",
        "type": "domain",
        "value": "sheet5-495707.iam.gserviceaccount.com",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/G60930953/status/2056919558967943187"
    },
    {
        "date": "2026-06-07 17:55:00",
        "user": "G60930953",
        "type": "url",
        "value": "http://sheet5-495707.iam.gserviceaccount.com",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/G60930953/status/2056919558967943187"
    },
    {
        "date": "2026-06-07 17:55:00",
        "user": "G60930953",
        "type": "sha256",
        "value": "1ba67bb1cfad42446880cca53cbd05fe66d7514b2bb139b48e5c63adff14be7b",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/G60930953/status/2056919558967943187"
    },
    {
        "date": "2026-06-07 18:00:00",
        "user": "phatomcandle",
        "type": "md5",
        "value": "3a685e809edd49870a16313ec9b6478a",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2063682420797546571"
    },
    {
        "date": "2026-06-07 18:00:00",
        "user": "phatomcandle",
        "type": "sha256",
        "value": "9fee0a50e6dbd19fb478225eaa0935fc2737c7d6b857ad325b1fc4d0b5988e2b",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2063682420797546571"
    },
    {
        "date": "2026-06-07 19:39:00",
        "user": "skocherhan",
        "type": "md5",
        "value": "0db53f4bbd5ca58c7a49994ca525ffcd",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2063707397151953387"
    },
    {
        "date": "2026-06-07 19:39:00",
        "user": "skocherhan",
        "type": "md5",
        "value": "6743e9672ce664fad2e5fd029543186e",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2063707397151953387"
    },
    {
        "date": "2026-06-07 19:39:00",
        "user": "skocherhan",
        "type": "md5",
        "value": "c43d21dfa6dcaaf84fff6cb00bd47693",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/skocherhan/status/2063707397151953387"
    },
    {
        "date": "2026-06-08 07:37:00",
        "user": "askardyuss",
        "type": "domain",
        "value": "cloud.mail.ru",
        "tags": [
            "#APT",
            "#infostealer",
            "#malware"
        ],
        "tweet": "https://x.com/askardyuss/status/2063888045317722503"
    },
    {
        "date": "2026-06-08 07:37:00",
        "user": "askardyuss",
        "type": "url",
        "value": "https://cloud.mail.ru/public/RFLP/RVckpRqm1",
        "tags": [
            "#APT",
            "#infostealer",
            "#malware"
        ],
        "tweet": "https://x.com/askardyuss/status/2063888045317722503"
    },
    {
        "date": "2026-06-08 07:37:00",
        "user": "askardyuss",
        "type": "md5",
        "value": "ed73908c65575cae4ae7debf23220056",
        "tags": [
            "#APT",
            "#infostealer",
            "#malware"
        ],
        "tweet": "https://x.com/askardyuss/status/2063888045317722503"
    },
    {
        "date": "2026-06-08 07:37:00",
        "user": "askardyuss",
        "type": "md5",
        "value": "9ff0d43cc02136108bcc9744240c3aa7",
        "tags": [
            "#APT",
            "#infostealer",
            "#malware"
        ],
        "tweet": "https://x.com/askardyuss/status/2063888045317722503"
    },
    {
        "date": "2026-06-08 18:00:00",
        "user": "phatomcandle",
        "type": "md5",
        "value": "3a685e809edd49870a16313ec9b6478a",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2064044806108774795"
    },
    {
        "date": "2026-06-08 18:00:00",
        "user": "phatomcandle",
        "type": "sha256",
        "value": "9fee0a50e6dbd19fb478225eaa0935fc2737c7d6b857ad325b1fc4d0b5988e2b",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2064044806108774795"
    },
    {
        "date": "2026-06-09 18:00:00",
        "user": "phatomcandle",
        "type": "md5",
        "value": "b21210068e777353b370f9e745f9ce79",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2064407194968477864"
    },
    {
        "date": "2026-06-09 18:00:00",
        "user": "phatomcandle",
        "type": "sha256",
        "value": "0b1b69fd0b2263b1f655f14b3054d4261741ca0d758ccc300134000f17019825",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2064407194968477864"
    },
    {
        "date": "2026-06-10 18:00:00",
        "user": "phatomcandle",
        "type": "md5",
        "value": "0c23ac85df1e4ab31c23cfa251ab9449",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2064769581449916716"
    },
    {
        "date": "2026-06-10 18:00:00",
        "user": "phatomcandle",
        "type": "sha256",
        "value": "95d357fd2e6b88919586caa695780ee7a64e33fa311de53f06097745b4b9023f",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2064769581449916716"
    },
    {
        "date": "2026-06-11 07:40:00",
        "user": "Fact_Finder03",
        "type": "ip",
        "value": "107.152.44.184",
        "tags": [
            "#ClickFix",
            "#FakeCaptcha"
        ],
        "tweet": "https://x.com/Fact_Finder03/status/2064976115320725667"
    },
    {
        "date": "2026-06-11 07:40:00",
        "user": "Fact_Finder03",
        "type": "ip",
        "value": "51.89.35.140",
        "tags": [
            "#ClickFix",
            "#FakeCaptcha"
        ],
        "tweet": "https://x.com/Fact_Finder03/status/2064976115320725667"
    },
    {
        "date": "2026-06-11 07:40:00",
        "user": "Fact_Finder03",
        "type": "ip",
        "value": "157.90.222.27",
        "tags": [
            "#ClickFix",
            "#FakeCaptcha"
        ],
        "tweet": "https://x.com/Fact_Finder03/status/2064976115320725667"
    },
    {
        "date": "2026-06-11 18:00:00",
        "user": "phatomcandle",
        "type": "md5",
        "value": "9b020bf0c04d91debf86eacb74f0b62a",
        "tags": [
            "#APT",
            "#AsyncRAT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2065131973811798454"
    },
    {
        "date": "2026-06-11 18:00:00",
        "user": "phatomcandle",
        "type": "sha256",
        "value": "05e7268abaa6c4c73d3d2db1fd5c9d79e7dd69372a124246096b2eca1afede1b",
        "tags": [
            "#APT",
            "#AsyncRAT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2065131973811798454"
    },
    {
        "date": "2026-06-11 19:36:00",
        "user": "skocherhan",
        "type": "domain",
        "value": "gatuso.duckdns.org",
        "tags": [
            "#APT",
            "#AsyncRAT",
            "#C2",
            "#Xworm",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2065156199666921726"
    },
    {
        "date": "2026-06-11 19:36:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://gatuso.duckdns.org",
        "tags": [
            "#APT",
            "#AsyncRAT",
            "#C2",
            "#Xworm",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2065156199666921726"
    },
    {
        "date": "2026-06-11 19:36:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://100.56.12.144:6606",
        "tags": [
            "#APT",
            "#AsyncRAT",
            "#C2",
            "#Xworm",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2065156199666921726"
    },
    {
        "date": "2026-06-11 19:36:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://18.216.200.48:5111",
        "tags": [
            "#APT",
            "#AsyncRAT",
            "#C2",
            "#Xworm",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2065156199666921726"
    },
    {
        "date": "2026-06-11 19:36:00",
        "user": "skocherhan",
        "type": "ip",
        "value": "100.56.12.144",
        "tags": [
            "#APT",
            "#AsyncRAT",
            "#C2",
            "#Xworm",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2065156199666921726"
    },
    {
        "date": "2026-06-11 19:36:00",
        "user": "skocherhan",
        "type": "ip",
        "value": "18.216.200.48",
        "tags": [
            "#APT",
            "#AsyncRAT",
            "#C2",
            "#Xworm",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2065156199666921726"
    },
    {
        "date": "2026-06-14 00:46:00",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "ryo.gamer.free",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2065959040107352202"
    },
    {
        "date": "2026-06-14 00:46:00",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://ryo.gamer.free",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2065959040107352202"
    },
    {
        "date": "2026-06-14 00:46:00",
        "user": "byrne_emmy12099",
        "type": "sha256",
        "value": "4ab376542deaf25b4d3e4ce84e44640dccb9358978e70da8e0dea6c93e8b12eb",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2065959040107352202"
    },
    {
        "date": "2026-06-15 11:28:00",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "ja.html-5.me",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2066483046308839882"
    },
    {
        "date": "2026-06-15 11:28:00",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://ja.html-5.me",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2066483046308839882"
    },
    {
        "date": "2026-06-15 11:28:00",
        "user": "byrne_emmy12099",
        "type": "sha256",
        "value": "ee48acc900deb4acd48d16fa5a08dc6d3be63bb6a915ba077c4cbeabe0451549",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2066483046308839882"
    },
    {
        "date": "2026-06-15 11:36:00",
        "user": "byrne_emmy12099",
        "type": "sha256",
        "value": "d542394a43a58b5dfb2c2edce7c59aaf87ffdfbcec09c44815ca593bcdaed17d",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2066484942834679964"
    },
    {
        "date": "2026-06-16 12:23:00",
        "user": "askardyuss",
        "type": "url",
        "value": "https://storage.googleapis.com/snapshothelper/he.txt",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/askardyuss/status/2066859258130665974"
    },
    {
        "date": "2026-06-16 12:23:00",
        "user": "askardyuss",
        "type": "domain",
        "value": "api.keensie.com:5198",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/askardyuss/status/2066859258130665974"
    },
    {
        "date": "2026-06-16 12:23:00",
        "user": "askardyuss",
        "type": "url",
        "value": "http://api.keensie.com:5198",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/askardyuss/status/2066859258130665974"
    },
    {
        "date": "2026-06-16 12:23:00",
        "user": "askardyuss",
        "type": "md5",
        "value": "8838df7298abf4d4312648e2ee80bdee",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/askardyuss/status/2066859258130665974"
    },
    {
        "date": "2026-06-16 12:23:00",
        "user": "askardyuss",
        "type": "md5",
        "value": "c0aca5dfbbfcb1c9796b3d974b1ee78b",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/askardyuss/status/2066859258130665974"
    },
    {
        "date": "2026-06-16 12:23:00",
        "user": "askardyuss",
        "type": "md5",
        "value": "1d1808686dbf36138f3067c34566d627",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/askardyuss/status/2066859258130665974"
    },
    {
        "date": "2026-06-16 12:23:00",
        "user": "askardyuss",
        "type": "md5",
        "value": "130fbe74fea31b30b59b071ccf22bf68",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/askardyuss/status/2066859258130665974"
    },
    {
        "date": "2026-06-16 13:11:00",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "atom.freehosting.dev",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2066871365534437482"
    },
    {
        "date": "2026-06-16 13:11:00",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://atom.freehosting.dev",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2066871365534437482"
    },
    {
        "date": "2026-06-16 13:11:00",
        "user": "byrne_emmy12099",
        "type": "sha256",
        "value": "4c971f81627b87691e617e89cb97a38295a28d86eb93505b3c72c8e276c97114",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2066871365534437482"
    },
    {
        "date": "2026-06-16 15:26:00",
        "user": "etugenio",
        "type": "ip",
        "value": "152.32.138.15",
        "tags": [
            "#APT",
            "#C2",
            "#malware"
        ],
        "tweet": "https://x.com/etugenio/status/2066905168642212154"
    },
    {
        "date": "2026-06-16 18:00:00",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://194.14.217.88",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2066943909172027691"
    },
    {
        "date": "2026-06-16 18:00:00",
        "user": "phatomcandle",
        "type": "ip",
        "value": "194.14.217.88",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2066943909172027691"
    },
    {
        "date": "2026-06-17 13:34:00",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "ch.10001mb.com",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2067239373519921623"
    },
    {
        "date": "2026-06-17 13:34:00",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://ch.10001mb.com",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2067239373519921623"
    },
    {
        "date": "2026-06-17 13:34:00",
        "user": "byrne_emmy12099",
        "type": "sha256",
        "value": "56a90f247ccffb63543d99a659f9517edde587f6e85752c82a9919e325de3ee5",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2067239373519921623"
    },
    {
        "date": "2026-06-17 18:00:00",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://216.173.65.250",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2067306296286879763"
    },
    {
        "date": "2026-06-17 18:00:00",
        "user": "phatomcandle",
        "type": "ip",
        "value": "216.173.65.250",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2067306296286879763"
    },
    {
        "date": "2026-06-18 07:21:00",
        "user": "nextronresearch",
        "type": "sha256",
        "value": "0a9bc91e7ea2c3931f662eea37c00c7c26c8996b65f6f7afe6cce8f6114f94b6",
        "tags": [
            "#APT",
            "#Gamaredon"
        ],
        "tweet": "https://x.com/nextronresearch/status/2067508038542545203"
    },
    {
        "date": "2026-06-18 07:21:00",
        "user": "nextronresearch",
        "type": "sha256",
        "value": "39dd1bd3bccc314d8933e5c41ed2ab084e4e20af569f77b7cf09abc5855b9483",
        "tags": [
            "#APT",
            "#Gamaredon"
        ],
        "tweet": "https://x.com/nextronresearch/status/2067508038542545203"
    },
    {
        "date": "2026-06-18 07:21:00",
        "user": "nextronresearch",
        "type": "sha256",
        "value": "1ebbdf3671cd5ca25a8a8e7ca2f6e46dd22c631e01bfcc5c909ae2fd680bf458",
        "tags": [
            "#APT",
            "#Gamaredon"
        ],
        "tweet": "https://x.com/nextronresearch/status/2067508038542545203"
    },
    {
        "date": "2026-06-18 07:21:00",
        "user": "nextronresearch",
        "type": "sha256",
        "value": "f668bd551859007cf2cc2a62bf0bf5414870a04e9782590c9bf85c849ddb308b",
        "tags": [
            "#APT",
            "#Gamaredon"
        ],
        "tweet": "https://x.com/nextronresearch/status/2067508038542545203"
    },
    {
        "date": "2026-06-18 07:21:00",
        "user": "nextronresearch",
        "type": "sha256",
        "value": "1c170b7470d507378ddb78e9d66305f1184e965baaf2d27ededb23a318a58953",
        "tags": [
            "#APT",
            "#Gamaredon"
        ],
        "tweet": "https://x.com/nextronresearch/status/2067508038542545203"
    },
    {
        "date": "2026-06-18 07:21:00",
        "user": "nextronresearch",
        "type": "sha256",
        "value": "bf338d88f60c0d352cd0d1b5e4bc6a1d9f1ac8fe1df48516ec0042cafda821e9",
        "tags": [
            "#APT",
            "#Gamaredon"
        ],
        "tweet": "https://x.com/nextronresearch/status/2067508038542545203"
    },
    {
        "date": "2026-06-18 07:21:00",
        "user": "nextronresearch",
        "type": "sha256",
        "value": "507b2fcdae058cebbd550965b90c44e878d7a2463058c846eeb68f0dc1b48eda",
        "tags": [
            "#APT",
            "#Gamaredon"
        ],
        "tweet": "https://x.com/nextronresearch/status/2067508038542545203"
    },
    {
        "date": "2026-06-18 07:21:00",
        "user": "nextronresearch",
        "type": "sha256",
        "value": "f9d2907d6b1de3078a0f111cc98764a92baf5ebd06cc8ab02637a65eff3b7f3a",
        "tags": [
            "#APT",
            "#Gamaredon"
        ],
        "tweet": "https://x.com/nextronresearch/status/2067508038542545203"
    },
    {
        "date": "2026-06-18 07:21:00",
        "user": "goldenjackel12",
        "type": "md5",
        "value": "a113090d748d0dac7d488c97f1305af2",
        "tags": [
            "#APT",
            "#Gamaredon"
        ],
        "tweet": "https://x.com/goldenjackel12/status/2062874399376802267"
    },
    {
        "date": "2026-06-18 07:21:00",
        "user": "goldenjackel12",
        "type": "md5",
        "value": "473c65b922d3308a98c6b76c7d99a196",
        "tags": [
            "#APT",
            "#Gamaredon"
        ],
        "tweet": "https://x.com/goldenjackel12/status/2062874399376802267"
    },
    {
        "date": "2026-06-18 18:00:00",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://45.64.186.26",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2067668684664119330"
    },
    {
        "date": "2026-06-18 18:00:00",
        "user": "phatomcandle",
        "type": "ip",
        "value": "45.64.186.26",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2067668684664119330"
    },
    {
        "date": "2026-06-18 18:08:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://216.173.65.250",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2067670794579145188"
    },
    {
        "date": "2026-06-18 18:08:00",
        "user": "skocherhan",
        "type": "ip",
        "value": "216.173.65.250",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2067670794579145188"
    },
    {
        "date": "2026-06-20 00:57:00",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "ch.10001mb.com",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2068136098161889699"
    },
    {
        "date": "2026-06-20 00:57:00",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://ch.10001mb.com",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2068136098161889699"
    },
    {
        "date": "2026-06-20 00:57:00",
        "user": "byrne_emmy12099",
        "type": "sha256",
        "value": "9f446f0786e39a2adde962b99d42eaaa75dbffe23f2464f6173d60c8f6e7d6dc",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2068136098161889699"
    },
    {
        "date": "2026-06-20 01:16:00",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "cyl.co.kr",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2068140908441485632"
    },
    {
        "date": "2026-06-20 01:16:00",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "https://cyl.co.kr",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2068140908441485632"
    },
    {
        "date": "2026-06-20 01:16:00",
        "user": "byrne_emmy12099",
        "type": "sha256",
        "value": "97fc1862fb55813ee199bbaef378bdf2e904cb73930a6a56903bef5614f2726b",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2068140908441485632"
    },
    {
        "date": "2026-06-20 18:00:00",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://194.36.190.17",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2068393461003513937"
    },
    {
        "date": "2026-06-20 18:00:00",
        "user": "phatomcandle",
        "type": "ip",
        "value": "194.36.190.17",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2068393461003513937"
    },
    {
        "date": "2026-06-21 05:19:00",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "https://drive.google.com/uc?export=download`&id=1FA9TvcakCgfeRdLaejIJbeoFjuI9GB6R",
        "tags": [
            "#APT",
            "#Kimsuky"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2068564471996645857"
    },
    {
        "date": "2026-06-21 05:19:00",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "lutkdd.corpsecs.com",
        "tags": [
            "#APT",
            "#Kimsuky"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2068564471996645857"
    },
    {
        "date": "2026-06-21 05:19:00",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "https://lutkdd.corpsecs.com",
        "tags": [
            "#APT",
            "#Kimsuky"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2068564471996645857"
    },
    {
        "date": "2026-06-21 05:19:00",
        "user": "byrne_emmy12099",
        "type": "sha256",
        "value": "aeb972af2b685115c16acde4689c39bb3ac892438b0f131369fe3e661a7d0586",
        "tags": [
            "#APT",
            "#Kimsuky"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2068564471996645857"
    },
    {
        "date": "2026-06-21 18:00:00",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://154.31.217.203",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2068755847854072238"
    },
    {
        "date": "2026-06-21 18:00:00",
        "user": "phatomcandle",
        "type": "ip",
        "value": "154.31.217.203",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2068755847854072238"
    },
    {
        "date": "2026-06-22 13:23:00",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "http://acnms.dmdoc.dynv6.net/smltm/bootservice.php",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2069048595794550891"
    },
    {
        "date": "2026-06-22 18:14:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://107.175.85.215",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2069121978460516646"
    },
    {
        "date": "2026-06-22 18:14:00",
        "user": "skocherhan",
        "type": "ip",
        "value": "107.175.85.215",
        "tags": [
            "#APT",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2069121978460516646"
    },
    {
        "date": "2026-06-23 06:26:00",
        "user": "suyog41",
        "type": "domain",
        "value": "update.ms-office.app",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/suyog41/status/2069306035496776105"
    },
    {
        "date": "2026-06-23 06:26:00",
        "user": "suyog41",
        "type": "url",
        "value": "http://update.ms-office.app",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/suyog41/status/2069306035496776105"
    },
    {
        "date": "2026-06-23 06:26:00",
        "user": "suyog41",
        "type": "md5",
        "value": "64f2681ad0940e6c2c9c76e6834117bf",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/suyog41/status/2069306035496776105"
    },
    {
        "date": "2026-06-23 18:12:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://159.223.34.28",
        "tags": [
            "#APT",
            "#C2",
            "#CobaltStrike",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2069483754595254724"
    },
    {
        "date": "2026-06-23 18:12:00",
        "user": "skocherhan",
        "type": "ip",
        "value": "159.223.34.28",
        "tags": [
            "#APT",
            "#C2",
            "#CobaltStrike",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2069483754595254724"
    },
    {
        "date": "2026-06-25 13:25:00",
        "user": "Thisism23567356",
        "type": "url",
        "value": "http://45.77.242.76",
        "tags": [
            "#APT",
            "#MustangPanda"
        ],
        "tweet": "https://x.com/Thisism23567356/status/2070136405813006621"
    },
    {
        "date": "2026-06-25 13:25:00",
        "user": "Thisism23567356",
        "type": "url",
        "value": "http://66.42.54.228",
        "tags": [
            "#APT",
            "#MustangPanda"
        ],
        "tweet": "https://x.com/Thisism23567356/status/2070136405813006621"
    },
    {
        "date": "2026-06-25 13:25:00",
        "user": "Thisism23567356",
        "type": "ip",
        "value": "45.77.242.76",
        "tags": [
            "#APT",
            "#MustangPanda"
        ],
        "tweet": "https://x.com/Thisism23567356/status/2070136405813006621"
    },
    {
        "date": "2026-06-25 13:25:00",
        "user": "Thisism23567356",
        "type": "ip",
        "value": "66.42.54.228",
        "tags": [
            "#APT",
            "#MustangPanda"
        ],
        "tweet": "https://x.com/Thisism23567356/status/2070136405813006621"
    },
    {
        "date": "2026-06-25 13:25:00",
        "user": "Thisism23567356",
        "type": "md5",
        "value": "a239df0247abb6ec29c6618a0a2f62c0",
        "tags": [
            "#APT",
            "#MustangPanda"
        ],
        "tweet": "https://x.com/Thisism23567356/status/2070136405813006621"
    },
    {
        "date": "2026-06-25 13:25:00",
        "user": "Thisism23567356",
        "type": "md5",
        "value": "66d68627d91cf99ac3be45b002bcd51d",
        "tags": [
            "#APT",
            "#MustangPanda"
        ],
        "tweet": "https://x.com/Thisism23567356/status/2070136405813006621"
    },
    {
        "date": "2026-06-25 13:25:00",
        "user": "Thisism23567356",
        "type": "md5",
        "value": "56a56ba41a1dc707c3b88a171f31b6d2",
        "tags": [
            "#APT",
            "#MustangPanda"
        ],
        "tweet": "https://x.com/Thisism23567356/status/2070136405813006621"
    },
    {
        "date": "2026-06-25 18:16:00",
        "user": "skocherhan",
        "type": "domain",
        "value": "solutionpelle.info",
        "tags": [
            "#APT",
            "#C2",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2070209545083707547"
    },
    {
        "date": "2026-06-25 18:16:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://solutionpelle.info",
        "tags": [
            "#APT",
            "#C2",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2070209545083707547"
    },
    {
        "date": "2026-06-25 18:16:00",
        "user": "skocherhan",
        "type": "url",
        "value": "http://149.28.128.239",
        "tags": [
            "#APT",
            "#C2",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2070209545083707547"
    },
    {
        "date": "2026-06-25 18:16:00",
        "user": "skocherhan",
        "type": "ip",
        "value": "149.28.128.239",
        "tags": [
            "#APT",
            "#C2",
            "#malware"
        ],
        "tweet": "https://x.com/skocherhan/status/2070209545083707547"
    },
    {
        "date": "2026-06-26 09:38:00",
        "user": "byrne_emmy12099",
        "type": "domain",
        "value": "tommy-v.lol",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2070441663668039825"
    },
    {
        "date": "2026-06-26 09:38:00",
        "user": "byrne_emmy12099",
        "type": "url",
        "value": "https://tommy-v.lol/m",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2070441663668039825"
    },
    {
        "date": "2026-06-26 09:38:00",
        "user": "byrne_emmy12099",
        "type": "sha256",
        "value": "254d585ad9e536457987fe575c35552884fd94260e562909c7b30835d8c99e1c",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2070441663668039825"
    },
    {
        "date": "2026-06-26 18:00:00",
        "user": "phatomcandle",
        "type": "domain",
        "value": "upflowinfo.info",
        "tags": [
            "#APT",
            "#C2",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2070567787400253600"
    },
    {
        "date": "2026-06-26 18:00:00",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://upflowinfo.info",
        "tags": [
            "#APT",
            "#C2",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2070567787400253600"
    },
    {
        "date": "2026-06-26 18:00:00",
        "user": "phatomcandle",
        "type": "url",
        "value": "http://45.77.34.242",
        "tags": [
            "#APT",
            "#C2",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2070567787400253600"
    },
    {
        "date": "2026-06-26 18:00:00",
        "user": "phatomcandle",
        "type": "ip",
        "value": "45.77.34.242",
        "tags": [
            "#APT",
            "#C2",
            "#malware"
        ],
        "tweet": "https://x.com/phatomcandle/status/2070567787400253600"
    },
    {
        "date": "2026-06-28 00:57:00",
        "user": "byrne_emmy12099",
        "type": "sha256",
        "value": "5068c758a461405275608df86114d8143fdd1fdafdd01261703145e4114c57b7",
        "tags": [
            "#APT"
        ],
        "tweet": "https://x.com/byrne_emmy12099/status/2071035323841441836"
    }
]