{
    "type": "bundle",
    "id": "bundle--c223e6c8-a288-4071-9f54-9cb24c66e0bc",
    "spec_version": "2.0",
    "objects": [
        {
            "type": "intrusion-set",
            "id": "intrusion-set--6a2e693f-24e5-451a-9f88-b36a108e5662",
            "created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5",
            "name": "APT1",
            "description": "[APT1](https://attack.mitre.org/groups/G0006) is a Chinese threat group that has been attributed to the 2nd Bureau of the People\u2019s Liberation Army (PLA) General Staff Department\u2019s (GSD) 3rd Department, commonly known by its Military Unit Cover Designator (MUCD) as Unit 61398. (Citation: Mandiant APT1)",
            "object_marking_refs": [
                "marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168"
            ],
            "external_references": [
                {
                    "source_name": "mitre-attack",
                    "url": "https://attack.mitre.org/groups/G0006",
                    "external_id": "G0006"
                },
                {
                    "source_name": "APT1",
                    "description": "(Citation: Mandiant APT1)"
                },
                {
                    "source_name": "Comment Crew",
                    "description": "(Citation: Mandiant APT1)"
                },
                {
                    "source_name": "Comment Group",
                    "description": "(Citation: Mandiant APT1)"
                },
                {
                    "source_name": "Comment Panda",
                    "description": "(Citation: CrowdStrike Putter Panda)"
                },
                {
                    "url": "https://www.fireeye.com/content/dam/fireeye-www/services/pdfs/mandiant-apt1-report.pdf",
                    "description": "Mandiant. (n.d.). APT1 Exposing One of China\u2019s Cyber Espionage Units. Retrieved July 18, 2016.",
                    "source_name": "Mandiant APT1"
                },
                {
                    "url": "http://cdn0.vox-cdn.com/assets/4589853/crowdstrike-intelligence-report-putter-panda.original.pdf",
                    "description": "Crowdstrike Global Intelligence Team. (2014, June 9). CrowdStrike Intelligence Report: Putter Panda. Retrieved January 22, 2016.",
                    "source_name": "CrowdStrike Putter Panda"
                }
            ],
            "aliases": [
                "APT1",
                "Comment Crew",
                "Comment Group",
                "Comment Panda"
            ],
            "modified": "2020-10-22T18:35:55.290Z",
            "created": "2017-05-31T21:31:47.955Z",
            "x_mitre_version": "1.3"
        }
    ]
}