{
 "response": [
  {
   "Event": {
    "uuid": "e5be2210-f7e1-562b-8dc6-5c8f93a6d26a",
    "info": "Hacking on Autopilot: Inside ARTEX Cybercrime Campaigns",
    "date": "2026-11-05",
    "threat_level_id": "1",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"espionage\""
     },
     {
      "name": "misp-galaxy:threat-actor=\"Storm-0940\""
     },
     {
      "name": "misp-galaxy:country=\"hong kong\""
     },
     {
      "name": "misp-galaxy:country=\"cambodia\""
     },
     {
      "name": "misp-galaxy:country=\"south korea\""
     },
     {
      "name": "misp-galaxy:country=\"thailand\""
     },
     {
      "name": "misp-galaxy:sector=\"Financial Services\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/hacking-on-autopilot-inside-artex-cybercrime-campaigns-20261105/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://research.checkpoint.com/2026/hacking-on-autopilot-inside-artex-cybercrime-campaigns/",
      "comment": "Check Point Research",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.microsoft.com/en-us/security/blog/2026/11/06/artex-abuse-expands-as-cybercriminals-target-financial-sector/",
      "comment": "Microsoft Threat Intelligence",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 2 articles in 2 outlets (Check Point Research, Microsoft Threat Intelligence), Nov 5 to Nov 7, 2026. Type: espionage campaign; sectors: financial services. Asia-Pacific countries affected: South Korea, Hong Kong, Thailand, Cambodia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  },
  {
   "Event": {
    "uuid": "a967416f-84ac-5091-9236-eec7739030c4",
    "info": "Cathay Pacific says data from 53,000 bookings compromised in Amadeus cyberattack",
    "date": "2026-10-30",
    "threat_level_id": "1",
    "analysis": "0",
    "distribution": "3",
    "published": false,
    "Orgc": {
     "name": "SecurityStudies.info"
    },
    "Tag": [
     {
      "name": "tlp:clear"
     },
     {
      "name": "securitystudies:status=\"detected-unreviewed\""
     },
     {
      "name": "securitystudies:type=\"data_breach\""
     },
     {
      "name": "misp-galaxy:country=\"hong kong\""
     },
     {
      "name": "misp-galaxy:country=\"japan\""
     },
     {
      "name": "misp-galaxy:country=\"malaysia\""
     },
     {
      "name": "misp-galaxy:country=\"singapore\""
     },
     {
      "name": "misp-galaxy:country=\"thailand\""
     },
     {
      "name": "misp-galaxy:sector=\"Transportation\""
     },
     {
      "name": "misp-galaxy:sector=\"Technology\""
     }
    ],
    "Attribute": [
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://securitystudies.info/cyber/incidents/cathay-pacific-says-data-from-53000-bookings-compromised-in-amadeus-cy-20261030/",
      "comment": "SecurityStudies.info entry",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.scmp.com/news/hong-kong/transport/article/3372722/cathay-pacific-says-data-53000-bookings-compromised-amadeus-cyberattack",
      "comment": "South China Morning Post",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.malaymail.com/news/malaysia/2026/11/01/malaysia-airlines-warns-customers-of-data-exposure-in-amadeus-cybersecurity-breach/241516",
      "comment": "Malay Mail",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.straitstimes.com/singapore/46000-sia-booking-records-accessed-illegally-in-data-breach-affecting-software-provider-amadeus",
      "comment": "The Straits Times",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.channelnewsasia.com/singapore/sia-singapore-airlines-amadeus-data-breach-booking-records-6517151",
      "comment": "Channel News Asia",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.matichon.co.th/economy/news_5969157",
      "comment": "Matichon",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.bangkokpost.com/thailand/general/3352180/60000-thai-bookings-compromised-in-amadeus-breach",
      "comment": "Bangkok Post",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://thethaiger.com/news/world/aviation/thai-airways-confirms-passenger-data-leak-but-credit-card-details-safe",
      "comment": "The Thaiger",
      "to_ids": false
     },
     {
      "type": "link",
      "category": "External analysis",
      "value": "https://www.matichon.co.th/economy/news_5969937",
      "comment": "Matichon",
      "to_ids": false
     },
     {
      "type": "text",
      "category": "Other",
      "value": "Detected automatically from 8 articles in 7 outlets (Bangkok Post, Channel News Asia, Malay Mail, Matichon, South China Morning Post, The Straits Times and others), Oct 30 to Nov 10, 2026. Type: data breach; sectors: transportation, technology. Asia-Pacific countries affected: Thailand, Japan, Singapore, Hong Kong, Malaysia. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
      "comment": "summary",
      "to_ids": false
     }
    ]
   }
  }
 ]
}