{
    "id": "1766623",
    "ioc": "https:\/\/freefoodaid.com\/ankara\/Favorites\/document.doc.LnK",
    "ioc_type": "url",
    "threat_type": "payload_delivery",
    "malware": "win.beardshell",
    "malware_printable": "BEARDSHELL",
    "malware_alias": null,
    "confidence_level": "100",
    "first_seen": "2026-03-15 06:48:58 UTC",
    "last_seen": null,
    "reporter": null,
    "reference": "https:\/\/www.zscaler.com\/blogs\/security-research\/operation-neusploit",
    "threatfox_link": "https:\/\/threatfox\/ioc\/1766623",
    "tags": [
        "APT28",
        "CVE-2026-21509",
        "Operation_Neusploit",
        "WebDav"
    ]
}