{
  "type": "bundle",
  "id": "bundle--f3d5105e-190f-4f3b-9426-bbe4c7f01ca6",
  "objects": [
    {
      "type": "report",
      "spec_version": "2.1",
      "id": "report--9a06041c-36b9-436e-8817-9a8f37e455b8",
      "created": "2026-09-24T12:22:07.000Z",
      "modified": "2026-09-24T12:22:07.000Z",
      "name": "TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords",
      "description": "Cybersecurity researchers have disclosed details of an active TeamFiltration campaign codenamed UNK_CondorFiltration that has targeted over 5,700 accounts across 28 Microsoft 365 tenants. According to Proofpoint, the activity has primarily focused on Chilean retail and financial institutions. \"The campaign compromised 7 accounts \u2013",
      "published": "2026-09-24T06:32:03.000Z",
      "report_types": [
        "threat-report"
      ],
      "object_refs": [
        "attack-pattern--f626f51d-ab4e-46ec-a1ed-c98f316788e4"
      ],
      "external_references": [
        {
          "source_name": "The Hacker News",
          "url": "https://thehackernews.com/2026/09/teamfiltration-compromises-seven.html",
          "description": "TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords"
        }
      ],
      "labels": [
        "Finance",
        "Technology"
      ]
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "id": "attack-pattern--f626f51d-ab4e-46ec-a1ed-c98f316788e4",
      "created": "2026-09-24T12:22:07.000Z",
      "modified": "2026-09-24T12:22:07.000Z",
      "name": "Command and Scripting Interpreter",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1059",
          "url": "https://attack.mitre.org/techniques/T1059/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "execution"
        }
      ]
    }
  ]
}