{"type":"bundle","id":"bundle--zentyteams-stix21-feed-1793120361432","spec_version":"2.1","objects":[{"type":"identity","spec_version":"2.1","id":"identity--b7e61a3e-1082-4df3-8d9e-camanit2026","created":"2026-09-01T00:00:00.000Z","modified":"2026-10-27T16:59:21.430Z","name":"ZentyTeamsCore Sovereign Cyber Defense Backbone","identity_class":"organization","sectors":["technology","defense","financial-services","government"],"contact_information":"security@ctar.tech"},{"type":"indicator","spec_version":"2.1","id":"indicator--6b9415c1-90fa-40f4-b258-29cf63a75891","created":"2026-09-10T12:00:00.000Z","modified":"2026-10-27T16:59:21.430Z","name":"RansomHub Extortion Pre-Exploitation Probing","description":"Suspicious scan sequence targeting QRIS payment gateway endpoints using high-frequency integer overflow payloads.","indicator_types":["malicious-activity","anomalous-activity"],"pattern":"[network-traffic:dst_port = 8080 AND network-traffic:protocols[*] = 'tcp']","pattern_type":"stix","valid_from":"2026-09-10T00:00:00.000Z","confidence":95},{"type":"indicator","spec_version":"2.1","id":"indicator--7a8324b2-81eb-41e5-a147-18be52b84782","created":"2026-09-12T08:30:00.000Z","modified":"2026-10-27T16:59:21.430Z","name":"BYOVD Kernel Exploit Probe Pattern","description":"Vulnerable signed third-party driver drop attempt targeting Ring-0 callbacks.","indicator_types":["compromised"],"pattern":"[file:hashes.'SHA-256' = '9f82c0e184ab23f7902341b590e84c987625143098fbdcae0192837465102938']","pattern_type":"stix","valid_from":"2026-09-12T00:00:00.000Z","confidence":98}]}