{"type":"bundle","id":"bundle--333fbc64-f83c-551b-b351-86ebec18189f","objects":[{"type":"identity","spec_version":"2.1","id":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-01-01T00:00:00.000Z","modified":"2026-01-01T00:00:00.000Z","name":"CTI-Hermes Autonomous Agent","identity_class":"organization"},{"type":"vulnerability","spec_version":"2.1","id":"vulnerability--df780bed-09ae-5e78-9aa0-7a0bb1971c3c","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"CVE-2026-1357","description":"Public-source record for CVE-2026-1357 in PCPJack | Cloud Worm Evicts TeamPCP and Steals Credentials at Scale.","external_references":[{"source_name":"cve","external_id":"CVE-2026-1357","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1357"}]},{"type":"vulnerability","spec_version":"2.1","id":"vulnerability--8305c9e3-5896-5d38-be4e-a64594711f55","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"CVE-2025-29927","description":"Public-source record for CVE-2025-29927 in PCPJack | Cloud Worm Evicts TeamPCP and Steals Credentials at Scale.","external_references":[{"source_name":"cve","external_id":"CVE-2025-29927","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-29927"}]},{"type":"vulnerability","spec_version":"2.1","id":"vulnerability--205d0a8b-a456-5c22-9274-93f256f086a3","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"CVE-2025-55182","description":"Public-source record for CVE-2025-55182 in PCPJack | Cloud Worm Evicts TeamPCP and Steals Credentials at Scale.","external_references":[{"source_name":"cve","external_id":"CVE-2025-55182","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-55182"}]},{"type":"vulnerability","spec_version":"2.1","id":"vulnerability--196a4f59-3b2b-57ce-87bc-78ed964f5ce1","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"CVE-2025-9501","description":"Public-source record for CVE-2025-9501 in PCPJack | Cloud Worm Evicts TeamPCP and Steals Credentials at Scale.","external_references":[{"source_name":"cve","external_id":"CVE-2025-9501","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-9501"}]},{"type":"vulnerability","spec_version":"2.1","id":"vulnerability--86768dae-7e7f-5882-b489-ec746b3d3e00","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"CVE-2025-48703","description":"Public-source record for CVE-2025-48703 in PCPJack | Cloud Worm Evicts TeamPCP and Steals Credentials at Scale.","external_references":[{"source_name":"cve","external_id":"CVE-2025-48703","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-48703"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--456bc584-133a-5538-8dcb-55e3bdab0ec0","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"IPV4: 38.242.204.245","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '38.242.204.245']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:27.372054Z","confidence":85},{"type":"indicator","spec_version":"2.1","id":"indicator--4f76c88a-3a3b-5434-939a-6f6d564f768d","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"IPV4: 38.242.245.147","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '38.242.245.147']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:27.372054Z","confidence":85},{"type":"indicator","spec_version":"2.1","id":"indicator--d1845fa4-f8c8-53b3-b452-3002a67d1bc9","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"IPV4: 193.187.129.143","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '193.187.129.143']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:27.372054Z","confidence":85},{"type":"indicator","spec_version":"2.1","id":"indicator--43652727-ccd3-5228-979d-3f36512ce36f","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"IPV4: 161.97.135.154","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '161.97.135.154']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:27.372054Z","confidence":85},{"type":"indicator","spec_version":"2.1","id":"indicator--849118b3-bc8a-5d59-a414-2ae27de6c0d9","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"IPV4: 213.136.80.73","indicator_types":["malicious-activity"],"pattern":"[ipv4-addr:value = '213.136.80.73']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:27.372054Z","confidence":85},{"type":"indicator","spec_version":"2.1","id":"indicator--a7752e2f-4dbd-5728-9ac0-65ae6e0610bb","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"DOMAIN: lateral.py","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'lateral.py']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:27.372054Z","confidence":85},{"type":"indicator","spec_version":"2.1","id":"indicator--93f18853-41f3-5a49-a7b0-91160c7de258","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"DOMAIN: update-386.bin","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'update-386.bin']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:27.372054Z","confidence":85},{"type":"indicator","spec_version":"2.1","id":"indicator--b4f69b24-1d9c-5fde-a5b6-0275414da337","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"DOMAIN: parser.py","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'parser.py']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:27.372054Z","confidence":85},{"type":"indicator","spec_version":"2.1","id":"indicator--dd5e3c42-0acf-547b-a44b-9ea5ff2b797f","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"DOMAIN: utils.py","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'utils.py']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:27.372054Z","confidence":85},{"type":"indicator","spec_version":"2.1","id":"indicator--55c41545-9c79-52fe-a380-0db4fb25d69b","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"DOMAIN: monitor.py","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'monitor.py']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:27.372054Z","confidence":85},{"type":"indicator","spec_version":"2.1","id":"indicator--858d5b18-0bea-5455-b8c4-51ba680ae9c0","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"DOMAIN: extractor.py","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'extractor.py']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:27.372054Z","confidence":85},{"type":"indicator","spec_version":"2.1","id":"indicator--e71a8d27-f349-56db-a14b-26823e56b309","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"DOMAIN: worm.py","indicator_types":["malicious-activity"],"pattern":"[domain-name:value = 'worm.py']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:27.372054Z","confidence":85},{"type":"indicator","spec_version":"2.1","id":"indicator--4b1c7198-8c6b-563d-b820-8ca3c39466c1","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"FILE_PATH: /var/www","indicator_types":["malicious-activity"],"pattern":"[file:name = '/var/www']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:27.372054Z","confidence":85},{"type":"indicator","spec_version":"2.1","id":"indicator--ec78e4e2-9b0f-5016-916b-03883ec28ddd","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"FILE_PATH: /.ssh/config","indicator_types":["malicious-activity"],"pattern":"[file:name = '/.ssh/config']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:27.372054Z","confidence":85},{"type":"indicator","spec_version":"2.1","id":"indicator--af107a30-fce2-55e0-be12-26586568dbbc","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"FILE_PATH: /var/tmp/apt-daily-upgrade","indicator_types":["malicious-activity"],"pattern":"[file:name = '/var/tmp/apt-daily-upgrade']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:27.372054Z","confidence":85},{"type":"indicator","spec_version":"2.1","id":"indicator--c3077aaa-8747-59c5-806e-f1f917461fcd","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"FILE_PATH: /var/lib/.spm/worm.py","indicator_types":["malicious-activity"],"pattern":"[file:name = '/var/lib/.spm/worm.py']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:27.372054Z","confidence":85},{"type":"indicator","spec_version":"2.1","id":"indicator--7a1b2d8b-453c-5efd-9773-4793c8f075f5","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"FILE_PATH: /var/lib/.spm/monitor.py","indicator_types":["malicious-activity"],"pattern":"[file:name = '/var/lib/.spm/monitor.py']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:27.372054Z","confidence":85},{"type":"indicator","spec_version":"2.1","id":"indicator--2347024b-8159-5007-8f7c-b0bec7dfb093","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"FILE_PATH: /run/secrets","indicator_types":["malicious-activity"],"pattern":"[file:name = '/run/secrets']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:27.372054Z","confidence":85},{"type":"indicator","spec_version":"2.1","id":"indicator--583e637d-cf15-550b-bc24-fedec09d4f83","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"SHA1: 2cd2c5268e41cdece1b0506bcda3b9eba2998119","indicator_types":["malicious-activity"],"pattern":"[file:hashes.'SHA-1' = '2cd2c5268e41cdece1b0506bcda3b9eba2998119']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:27.372054Z","confidence":85},{"type":"indicator","spec_version":"2.1","id":"indicator--ac8ac5f4-e3f0-5aaf-992c-65f252605261","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-08-30T08:05:27.372054Z","name":"URL: https://cdn.cloudfront-js.com:8443/u","indicator_types":["malicious-activity"],"pattern":"[url:value = 'https://cdn.cloudfront-js.com:8443/u']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-08-30T08:05:27.372054Z","confidence":85},{"type":"report","spec_version":"2.1","id":"report--a3659f53-f366-5deb-9c40-eefb3e07a7cd","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-08-30T08:05:27.372054Z","modified":"2026-10-30T15:09:10.649927Z","name":"PCPJack | Cloud Worm Evicts TeamPCP and Steals Credentials at Scale","description":"Public reporting documents: PCPJack | Cloud Worm Evicts TeamPCP and Steals Credentials at Scale. This is public CTI and does not assess organizational exposure.","published":"2026-08-30T08:05:27.372054Z","report_types":["threat-report"],"object_refs":["identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","vulnerability--df780bed-09ae-5e78-9aa0-7a0bb1971c3c","vulnerability--8305c9e3-5896-5d38-be4e-a64594711f55","vulnerability--205d0a8b-a456-5c22-9274-93f256f086a3","vulnerability--196a4f59-3b2b-57ce-87bc-78ed964f5ce1","vulnerability--86768dae-7e7f-5882-b489-ec746b3d3e00","indicator--456bc584-133a-5538-8dcb-55e3bdab0ec0","indicator--4f76c88a-3a3b-5434-939a-6f6d564f768d","indicator--d1845fa4-f8c8-53b3-b452-3002a67d1bc9","indicator--43652727-ccd3-5228-979d-3f36512ce36f","indicator--849118b3-bc8a-5d59-a414-2ae27de6c0d9","indicator--a7752e2f-4dbd-5728-9ac0-65ae6e0610bb","indicator--93f18853-41f3-5a49-a7b0-91160c7de258","indicator--b4f69b24-1d9c-5fde-a5b6-0275414da337","indicator--dd5e3c42-0acf-547b-a44b-9ea5ff2b797f","indicator--55c41545-9c79-52fe-a380-0db4fb25d69b","indicator--858d5b18-0bea-5455-b8c4-51ba680ae9c0","indicator--e71a8d27-f349-56db-a14b-26823e56b309","indicator--4b1c7198-8c6b-563d-b820-8ca3c39466c1","indicator--ec78e4e2-9b0f-5016-916b-03883ec28ddd","indicator--af107a30-fce2-55e0-be12-26586568dbbc","indicator--c3077aaa-8747-59c5-806e-f1f917461fcd","indicator--7a1b2d8b-453c-5efd-9773-4793c8f075f5","indicator--2347024b-8159-5007-8f7c-b0bec7dfb093","indicator--583e637d-cf15-550b-bc24-fedec09d4f83","indicator--ac8ac5f4-e3f0-5aaf-992c-65f252605261"],"confidence":85}]}