{ "type": "bundle", "id": "bundle--7b9778b6-4151-41ce-966b-60abf51296ef", "spec_version": "2.0", "objects": [ { "object_marking_refs": [ "marking-definition--fa42a846-8d90-4e51-bc29-71d5b4802168" ], "id": "relationship--0082e86b-a7b7-496b-af03-88785b6c8fbb", "type": "relationship", "created": "2021-12-06T15:43:24.481Z", "created_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5", "external_references": [ { "source_name": "US-CERT TA18-074A", "description": "US-CERT. (2018, March 16). Alert (TA18-074A): Russian Government Cyber Activity Targeting Energy and Other Critical Infrastructure Sectors. Retrieved June 6, 2018.", "url": "https://www.us-cert.gov/ncas/alerts/TA18-074A" } ], "modified": "2021-12-06T15:43:24.481Z", "description": "[Dragonfly](https://attack.mitre.org/groups/G0035) has compressed data into .zip files prior to exfiltration.(Citation: US-CERT TA18-074A)", "relationship_type": "uses", "source_ref": "intrusion-set--1c63d4ec-0a75-4daa-b1df-0d11af3d3cc1", "target_ref": "attack-pattern--53ac20cd-aca3-406e-9aa0-9fc7fdc60a5a", "x_mitre_version": "1.0", "x_mitre_modified_by_ref": "identity--c78cb6e5-0c4b-4611-8297-d1b8b55e40b5" } ] }