{
    "count": 3,
    "indicators": [
        {
            "ioc_value": "https:\/\/www.ransomware.live\/group\/babuk2",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 2,
            "first_seen": "2026-08-06 13:12:25",
            "last_seen": "2026-08-06 14:45:04"
        },
        {
            "ioc_value": "https:\/\/www.trustwave.com\/en-us\/resources\/blogs\/spiderlabs-blog\/babuk2-bjorka-the-evolution-of-ransomware-for-data-commoditization\/",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:02",
            "last_seen": "2026-08-06 13:13:02"
        },
        {
            "ioc_value": "https:\/\/www.socradar.io\/dark-web-profile-babuk-babuk2\/",
            "ioc_type": "url",
            "category": "Ransomware Actors",
            "threat_score": "0.50",
            "confidence_score": "0.50",
            "sighting_count": 1,
            "first_seen": "2026-08-06 13:13:02",
            "last_seen": "2026-08-06 13:13:02"
        }
    ]
}