{"type":"bundle","id":"bundle--de5a4131-f001-56f9-8490-e66a87df8468","objects":[{"type":"identity","spec_version":"2.1","id":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-01-01T00:00:00.000Z","modified":"2026-01-01T00:00:00.000Z","name":"CTI-Hermes Autonomous Agent","identity_class":"organization"},{"type":"attack-pattern","spec_version":"2.1","id":"attack-pattern--1c747bbb-bd39-5146-b27e-270e781e2735","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-11T22:24:37.032377Z","modified":"2026-09-11T22:24:37.032377Z","name":"Launch Agent","external_references":[{"source_name":"mitre-attack","external_id":"T1543.001","url":"https://attack.mitre.org/techniques/T1543/001/"}]},{"type":"attack-pattern","spec_version":"2.1","id":"attack-pattern--7281d08f-b7c7-5843-83a6-29ba4392d6a4","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-11T22:24:37.032377Z","modified":"2026-09-11T22:24:37.032377Z","name":"Web Protocols","external_references":[{"source_name":"mitre-attack","external_id":"T1071.001","url":"https://attack.mitre.org/techniques/T1071/001/"}]},{"type":"attack-pattern","spec_version":"2.1","id":"attack-pattern--042477c2-1147-5bf3-89d4-1fad063b3927","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-11T22:24:37.032377Z","modified":"2026-09-11T22:24:37.032377Z","name":"Credentials from Web Browsers","external_references":[{"source_name":"mitre-attack","external_id":"T1555.003","url":"https://attack.mitre.org/techniques/T1555/003/"}]},{"type":"indicator","spec_version":"2.1","id":"indicator--2c819f7b-d573-584b-89be-53c08d576c42","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-11T22:24:37.032377Z","modified":"2026-09-11T22:24:37.032377Z","name":"SHA256: 6328567511d88fdc2ae0939c5ef17b7a63d2a833881900de018a4f12f4982525","indicator_types":["malicious-activity"],"pattern":"[file:hashes.'SHA-256' = '6328567511d88fdc2ae0939c5ef17b7a63d2a833881900de018a4f12f4982525']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-09-11T22:24:37.032377Z","confidence":95},{"type":"indicator","spec_version":"2.1","id":"indicator--dd3eacd8-56f8-5f54-a124-5f28f1ad6975","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-11T22:24:37.032377Z","modified":"2026-09-11T22:24:37.032377Z","name":"SHA256: 77b4fd46994992f0e57302cfe76ed23c0d90101381d2b89fc2ddf5c4536e77ca","indicator_types":["malicious-activity"],"pattern":"[file:hashes.'SHA-256' = '77b4fd46994992f0e57302cfe76ed23c0d90101381d2b89fc2ddf5c4536e77ca']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-09-11T22:24:37.032377Z","confidence":95},{"type":"indicator","spec_version":"2.1","id":"indicator--ad7aaa65-e092-54f7-98a8-8dad2e1c96e1","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-11T22:24:37.032377Z","modified":"2026-09-11T22:24:37.032377Z","name":"SHA256: baabf249c77bc54c54ab0e66e15af798bd28aa5b4683554456a8b73ab8741239","indicator_types":["malicious-activity"],"pattern":"[file:hashes.'SHA-256' = 'baabf249c77bc54c54ab0e66e15af798bd28aa5b4683554456a8b73ab8741239']","pattern_type":"stix","pattern_version":"2.1","valid_from":"2026-09-11T22:24:37.032377Z","confidence":95},{"type":"relationship","spec_version":"2.1","id":"relationship--244185af-db4b-5e20-a2f7-f94d68923fba","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-11T22:24:37.032377Z","modified":"2026-09-11T22:24:37.032377Z","relationship_type":"indicates","source_ref":"indicator--2c819f7b-d573-584b-89be-53c08d576c42","target_ref":"attack-pattern--1c747bbb-bd39-5146-b27e-270e781e2735"},{"type":"relationship","spec_version":"2.1","id":"relationship--c25ccd7c-38d6-5812-a9f2-544c7287c370","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-11T22:24:37.032377Z","modified":"2026-09-11T22:24:37.032377Z","relationship_type":"indicates","source_ref":"indicator--2c819f7b-d573-584b-89be-53c08d576c42","target_ref":"attack-pattern--7281d08f-b7c7-5843-83a6-29ba4392d6a4"},{"type":"relationship","spec_version":"2.1","id":"relationship--b9a49a65-72f0-51c4-a9db-c062bd95eb6b","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-11T22:24:37.032377Z","modified":"2026-09-11T22:24:37.032377Z","relationship_type":"indicates","source_ref":"indicator--2c819f7b-d573-584b-89be-53c08d576c42","target_ref":"attack-pattern--042477c2-1147-5bf3-89d4-1fad063b3927"},{"type":"relationship","spec_version":"2.1","id":"relationship--d9b24a7b-89eb-5432-946e-622c78b957ea","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-11T22:24:37.032377Z","modified":"2026-09-11T22:24:37.032377Z","relationship_type":"indicates","source_ref":"indicator--dd3eacd8-56f8-5f54-a124-5f28f1ad6975","target_ref":"attack-pattern--1c747bbb-bd39-5146-b27e-270e781e2735"},{"type":"relationship","spec_version":"2.1","id":"relationship--14f85246-abc6-5bbe-aed4-8eec78688e9f","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-11T22:24:37.032377Z","modified":"2026-09-11T22:24:37.032377Z","relationship_type":"indicates","source_ref":"indicator--dd3eacd8-56f8-5f54-a124-5f28f1ad6975","target_ref":"attack-pattern--7281d08f-b7c7-5843-83a6-29ba4392d6a4"},{"type":"relationship","spec_version":"2.1","id":"relationship--4c6246a4-4da6-50de-92ce-f9c9611cc153","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-11T22:24:37.032377Z","modified":"2026-09-11T22:24:37.032377Z","relationship_type":"indicates","source_ref":"indicator--dd3eacd8-56f8-5f54-a124-5f28f1ad6975","target_ref":"attack-pattern--042477c2-1147-5bf3-89d4-1fad063b3927"},{"type":"relationship","spec_version":"2.1","id":"relationship--496c8862-07fa-56fa-bffc-d9668889753f","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-11T22:24:37.032377Z","modified":"2026-09-11T22:24:37.032377Z","relationship_type":"indicates","source_ref":"indicator--ad7aaa65-e092-54f7-98a8-8dad2e1c96e1","target_ref":"attack-pattern--1c747bbb-bd39-5146-b27e-270e781e2735"},{"type":"relationship","spec_version":"2.1","id":"relationship--7c5ddf06-6c1e-5aaf-84ce-2d0463b177d5","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-11T22:24:37.032377Z","modified":"2026-09-11T22:24:37.032377Z","relationship_type":"indicates","source_ref":"indicator--ad7aaa65-e092-54f7-98a8-8dad2e1c96e1","target_ref":"attack-pattern--7281d08f-b7c7-5843-83a6-29ba4392d6a4"},{"type":"relationship","spec_version":"2.1","id":"relationship--c86432b2-8d90-549f-9f07-2711fee4c1d8","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-11T22:24:37.032377Z","modified":"2026-09-11T22:24:37.032377Z","relationship_type":"indicates","source_ref":"indicator--ad7aaa65-e092-54f7-98a8-8dad2e1c96e1","target_ref":"attack-pattern--042477c2-1147-5bf3-89d4-1fad063b3927"},{"type":"report","spec_version":"2.1","id":"report--3c486900-e830-5fa2-b822-f48d9765fe39","created_by_ref":"identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","created":"2026-09-11T22:24:37.032377Z","modified":"2026-10-30T15:09:11.501263Z","name":"macOS Gaslight Rust Backdoor Weaponizes Prompt Injection Against Analysts","description":"SentinelLabs disclosed macOS.Gaslight, a sophisticated persistent backdoor written in Rust that targets macOS workstations. The malware bundles interactive remote shell capabilities, a Python-based credential stealer, and Telegram command-and-control with bot token self-redaction. Uniquely, macOS.Gaslight embeds a 38-message prompt injection scaffold formatted with Markdown and delimiter tokens specifically designed to subvert LLM-assisted analyst triage pipelines.","published":"2026-09-11T22:24:37.032377Z","report_types":["threat-report"],"object_refs":["identity--f431f809-377b-45e0-aa1c-6a4751cae5ff","attack-pattern--1c747bbb-bd39-5146-b27e-270e781e2735","attack-pattern--7281d08f-b7c7-5843-83a6-29ba4392d6a4","attack-pattern--042477c2-1147-5bf3-89d4-1fad063b3927","indicator--2c819f7b-d573-584b-89be-53c08d576c42","indicator--dd3eacd8-56f8-5f54-a124-5f28f1ad6975","indicator--ad7aaa65-e092-54f7-98a8-8dad2e1c96e1","relationship--244185af-db4b-5e20-a2f7-f94d68923fba","relationship--c25ccd7c-38d6-5812-a9f2-544c7287c370","relationship--b9a49a65-72f0-51c4-a9db-c062bd95eb6b","relationship--d9b24a7b-89eb-5432-946e-622c78b957ea","relationship--14f85246-abc6-5bbe-aed4-8eec78688e9f","relationship--4c6246a4-4da6-50de-92ce-f9c9611cc153","relationship--496c8862-07fa-56fa-bffc-d9668889753f","relationship--7c5ddf06-6c1e-5aaf-84ce-2d0463b177d5","relationship--c86432b2-8d90-549f-9f07-2711fee4c1d8"],"confidence":95}]}