{
    "01c8a5d4-f91c-4145-9ded-989becbd4d07": {
        "event_id": 24881,
        "created_at": "2026-07-20T07:50:26.547983+00:00",
        "updated_at": "2026-07-20T08:03:50.902170+00:00",
        "name": "Campagna di Smishing INPS italiana",
        "description": "",
        "subject": null,
        "tlp": "1",
        "campaign_type": "phishing",
        "method": "linked",
        "country": "italy",
        "file_type": [],
        "theme": "Verifica",
        "malware": null,
        "phishing": "INPS",
        "via": "sms",
        "tag": [],
        "ioc_list": {
            "md5": [],
            "sha1": [],
            "sha256": [],
            "imphash": [],
            "domain": [
                "inpso.sbs"
            ],
            "url": [
                "https://inpso.sbs/wf011_it_ssn_inps/footer.html",
                "https://inpso.sbs/ZWTtfartyN/api",
                "https://inpso.sbs/wf011_it_ssn_inps/header.html",
                "https://inpso.sbs/ZWTtfartyN/api/input",
                "https://inpso.sbs/IT"
            ],
            "ipv4": [],
            "email": []
        },
        "email_victim": [],
        "ioca_version": "1.0",
        "organization": "cert-agid"
    },
    "02c7c7e9-1453-4cd7-a2b5-d858bb0f2103": {
        "event_id": 24898,
        "created_at": "2026-07-20T10:11:30.763569+00:00",
        "updated_at": "2026-07-20T13:52:41.068712+00:00",
        "name": "Campagna di Smishing INPS italiana",
        "description": "",
        "subject": null,
        "tlp": "1",
        "campaign_type": "phishing",
        "method": "linked",
        "country": "italy",
        "file_type": [],
        "theme": "Verifica",
        "malware": null,
        "phishing": "INPS",
        "via": "sms",
        "tag": [],
        "ioc_list": {
            "md5": [],
            "sha1": [],
            "sha256": [],
            "imphash": [],
            "domain": [
                "inps-im.com"
            ],
            "url": [
                "https://inps-im.com/TzfvloMAFK/api",
                "https://inps-im.com/wf011_it_ssn_inps_1103/header.html",
                "https://inps-im.com/wf011_it_ssn_inps_1103/footer.html",
                "https://inps-im.com/info",
                "https://inps-im.com/TzfvloMAFK/api/input"
            ],
            "ipv4": [],
            "email": []
        },
        "email_victim": [],
        "ioca_version": "1.0",
        "organization": "cert-agid"
    },
    "595071d2-8a5d-49e1-8583-dd8ccfd87e03": {
        "event_id": 24897,
        "created_at": "2026-07-20T10:08:57.772380+00:00",
        "updated_at": "2026-07-20T13:52:31.610158+00:00",
        "name": "Campagna di Smishing INPS italiana",
        "description": "",
        "subject": null,
        "tlp": "1",
        "campaign_type": "phishing",
        "method": "linked",
        "country": "italy",
        "file_type": [],
        "theme": "Verifica",
        "malware": null,
        "phishing": "INPS",
        "via": "sms",
        "tag": [],
        "ioc_list": {
            "md5": [],
            "sha1": [],
            "sha256": [],
            "imphash": [],
            "domain": [
                "inpsz.cfd"
            ],
            "url": [
                "https://inpsz.cfd/tQJukKvJBM/api",
                "https://inpsz.cfd/wf011_it_ssn_inps/footer.html",
                "https://inpsz.cfd/tQJukKvJBM/api/input",
                "https://inpsz.cfd/wf011_it_ssn_inps/header.html",
                "https://inpsz.cfd/IT"
            ],
            "ipv4": [],
            "email": []
        },
        "email_victim": [],
        "ioca_version": "1.0",
        "organization": "cert-agid"
    },
    "9fa9638d-43d8-450d-9b6e-d954ec1450a3": {
        "event_id": 24882,
        "created_at": "2026-07-20T07:50:51.606883+00:00",
        "updated_at": "2026-07-20T07:51:01.226152+00:00",
        "name": "Campagna di Smishing INPS italiana",
        "description": "",
        "subject": null,
        "tlp": "1",
        "campaign_type": "phishing",
        "method": "linked",
        "country": "italy",
        "file_type": [],
        "theme": "Verifica",
        "malware": null,
        "phishing": "INPS",
        "via": "sms",
        "tag": [],
        "ioc_list": {
            "md5": [],
            "sha1": [],
            "sha256": [],
            "imphash": [],
            "domain": [
                "inpso.cfd"
            ],
            "url": [
                "https://inpso.cfd/wf011_it_ssn_inps/header.html",
                "https://inpso.cfd/IT",
                "http://inpso.cfd/IT",
                "https://inpso.cfd/ZWTtfartyN/api",
                "https://inpso.cfd/ZWTtfartyN/api/input",
                "https://inpso.cfd/wf011_it_ssn_inps/footer.html"
            ],
            "ipv4": [],
            "email": []
        },
        "email_victim": [],
        "ioca_version": "1.0",
        "organization": "cert-agid"
    },
    "f1d1d959-f8ca-4f6a-b625-2341a7e1c6a5": {
        "event_id": 24912,
        "created_at": "2026-07-20T13:17:59.709916+00:00",
        "updated_at": "2026-07-20T13:52:47.205452+00:00",
        "name": "Campagna di Smishing INPS italiana",
        "description": "",
        "subject": null,
        "tlp": "1",
        "campaign_type": "phishing",
        "method": "linked",
        "country": "italy",
        "file_type": [],
        "theme": "Verifica",
        "malware": null,
        "phishing": "INPS",
        "via": "sms",
        "tag": [],
        "ioc_list": {
            "md5": [],
            "sha1": [],
            "sha256": [],
            "imphash": [],
            "domain": [
                "inpsp.cfd"
            ],
            "url": [
                "https://inpsp.cfd/rKhqlletxt/api/input",
                "https://inpsp.cfd/IT",
                "https://inpsp.cfd/rKhqlletxt/"
            ],
            "ipv4": [],
            "email": []
        },
        "email_victim": [],
        "ioca_version": "1.0",
        "organization": "cert-agid"
    }
}