{
    "count": 3,
    "indicators": [
        {
            "ioc_value": "https:\/\/media.defense.gov\/2022\/Dec\/13\/2003131586\/-1\/-1\/0\/CSA-APT5-CITRIXADC-V1.PDF",
            "ioc_type": "url",
            "category": "ATT&CK",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 5,
            "first_seen": "2026-08-06 13:09:17",
            "last_seen": "2026-08-06 14:48:29"
        },
        {
            "ioc_value": "lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion",
            "ioc_type": "onion",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:25",
            "last_seen": "2026-08-06 14:45:05"
        },
        {
            "ioc_value": "http:\/\/lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 3,
            "first_seen": "2026-08-06 13:12:25",
            "last_seen": "2026-08-06 14:45:05"
        }
    ]
}