{
  "type": "bundle",
  "id": "bundle--bad7ab83-d2bc-458c-b25c-62487b8b4edb",
  "objects": [
    {
      "type": "report",
      "spec_version": "2.1",
      "id": "report--2a55654d-fe91-4706-8d67-a9464daf46ec",
      "created": "2026-04-20T09:05:57.000Z",
      "modified": "2026-04-20T09:05:57.000Z",
      "name": "Threat Brief: Escalation of Cyber Risk Related to Iran (Updated April 17)",
      "description": "Unit 42 details recent Iranian cyberattack activity, sharing direct observations of phishing, hacktivist activity and cybercrime. We include recommendations for defenders. The post Threat Brief: Escalation of Cyber Risk Related to Iran (Updated April 17) appeared first on Unit 42 .",
      "published": "2026-04-17T22:35:07.000Z",
      "report_types": [
        "threat-report"
      ],
      "object_refs": [
        "attack-pattern--5a9bf1e8-bcee-4901-8917-616d027d2731"
      ],
      "external_references": [
        {
          "source_name": "Palo Alto Unit 42",
          "url": "https://unit42.paloaltonetworks.com/iranian-cyberattacks-2026",
          "description": "Threat Brief: Escalation of Cyber Risk Related to Iran (Updated April 17)"
        }
      ],
      "labels": []
    },
    {
      "type": "attack-pattern",
      "spec_version": "2.1",
      "id": "attack-pattern--5a9bf1e8-bcee-4901-8917-616d027d2731",
      "created": "2026-04-20T09:05:57.000Z",
      "modified": "2026-04-20T09:05:57.000Z",
      "name": "Phishing",
      "external_references": [
        {
          "source_name": "mitre-attack",
          "external_id": "T1566",
          "url": "https://attack.mitre.org/techniques/T1566/"
        }
      ],
      "kill_chain_phases": [
        {
          "kill_chain_name": "mitre-attack",
          "phase_name": "initial-access"
        }
      ]
    }
  ]
}