{
 "type": "bundle",
 "id": "bundle--df3364c6-8189-4d29-b3a1-bb21ae2c3ad7",
 "objects": [
  {
   "type": "marking-definition",
   "spec_version": "2.1",
   "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9",
   "created": "2017-01-20T00:00:00.000Z",
   "definition_type": "tlp",
   "name": "TLP:WHITE",
   "definition": {
    "tlp": "white"
   }
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "SecurityStudies.info",
   "identity_class": "organization",
   "description": "Open-source security intelligence on Asia-Pacific. Incidents are detected by rules in the news unless marked curated."
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "incident",
   "id": "incident--b3f7e2b0-12a7-5a29-97bd-dda9ed7b18a3",
   "created": "2026-11-10T16:32:08.225Z",
   "modified": "2026-11-13T00:02:47.484Z",
   "name": "North Korean hackers behind Japan’s massive GMO data leak, investigation finds",
   "description": "Detected automatically from 2 articles in 2 outlets (NHK, South China Morning Post), Nov 1 to Nov 2, 2026. Type: data breach. Asia-Pacific countries affected: Japan. Read the sources before relying on any of it: no analyst has reviewed this entry unless it says so.",
   "confidence": 15,
   "labels": [
    "data_breach",
    "detected-unreviewed"
   ],
   "external_references": [
    {
     "source_name": "securitystudies.info",
     "url": "https://securitystudies.info/cyber/incidents/chinese-ai-tool-behind-cyberattacks-in-japan-security-firm-20261020/"
    },
    {
     "source_name": "Channel News Asia",
     "url": "https://www.channelnewsasia.com/east-asia/china-ai-tool-artex-japan-cyberattack-6474611",
     "description": "Chinese AI tool behind cyberattacks in Japan: Security firm"
    },
    {
     "source_name": "Japan Today",
     "url": "https://japantoday.com/category/crime/update2-security-firm-finds-china-linked-ai-agent-behind-japan-cyberattacks",
     "description": "Security firm finds China-linked AI agent behind Japan cyberattacks"
    },
    {
     "source_name": "NHK",
     "url": "https://news.web.nhk/newsweb/na/nd-20261021de62520",
     "description": "岩井コスモ証券 不正アクセスで顧客が意図しない売買注文"
    },
    {
     "source_name": "Taipei Times",
     "url": "https://www.taipeitimes.com/News/world/archives/2026/10/21/2003866365",
     "description": "China-made AI tool behind cyberattacks in Japan, GMO says"
    },
    {
     "source_name": "NHK",
     "url": "https://news.web.nhk/newsweb/na/nd-20261023de64076",
     "description": "GMO FX取引のサーバーに不正アクセス 口座で不正操作の相談も"
    },
    {
     "source_name": "NHK",
     "url": "https://news.web.nhk/newsweb/na/nd-20261024de64764",
     "description": "GMO 不正アクセス問題で政府に「能動的サイバー防御」を要請"
    },
    {
     "source_name": "Liberty Times",
     "url": "https://ec.ltn.com.tw/article/breakingnews/5618952",
     "description": "日本GMO外匯交易伺服器遭駭 股價重挫逾15％"
    },
    {
     "source_name": "The Japan Times",
     "url": "https://www.japantimes.co.jp/news/2026/10/28/japan/crime-legal/gmo-hacker-website-shutdown/",
     "description": "Website used by hackers to leak info shut down, GMO says"
    },
    {
     "source_name": "NHK",
     "url": "https://news.web.nhk/newsweb/na/nd-20261101de69281",
     "description": "GMO傘下 顧客情報漏えい 9年近く外部から取得可能な状態"
    },
    {
     "source_name": "South China Morning Post",
     "url": "https://www.scmp.com/news/asia/east-asia/article/3372913/north-korea-hackers-behind-japans-massive-gmo-data-leak-investigation-finds",
     "description": "North Korean hackers behind Japan’s massive GMO data leak, investigation finds"
    }
   ],
   "x_securitystudies_occurred_on": "2026-11-01",
   "x_securitystudies_severity": 2,
   "x_securitystudies_status": "detected-unreviewed",
   "x_securitystudies_sectors": [],
   "x_securitystudies_eu_relevance": "low"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "location",
   "id": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e",
   "created": "2026-11-10T00:00:00.000Z",
   "modified": "2026-11-10T00:00:00.000Z",
   "name": "Japan",
   "country": "JP"
  },
  {
   "spec_version": "2.1",
   "created_by_ref": "identity--ad5643e6-164f-562c-87ee-e2b5840970aa",
   "object_marking_refs": [
    "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"
   ],
   "type": "relationship",
   "id": "relationship--ee74280c-8486-5030-b349-8f43972feab0",
   "created": "2026-11-10T16:32:08.225Z",
   "modified": "2026-11-10T16:32:08.225Z",
   "relationship_type": "related-to",
   "source_ref": "incident--b3f7e2b0-12a7-5a29-97bd-dda9ed7b18a3",
   "target_ref": "location--82f471cb-7d16-5a5e-89ef-b8fed6d0f45e",
   "description": "affected country"
  }
 ]
}