{"id":11018,"date":"2025-10-08T19:58:51","date_gmt":"2025-10-08T19:58:51","guid":{"rendered":"http:\/\/localhost\/cyber-operations\/leafminer\/"},"modified":"2025-10-08T19:58:51","modified_gmt":"2025-10-08T19:58:51","slug":"leafminer","status":"publish","type":"post","link":"https:\/\/www.cfr.org\/cyber-operations\/leafminer","title":{"rendered":"Leafminer"},"content":{"rendered":"<p><span style=\"font-size:11.0pt;line-height:107%;,sans-serif;color:black\">This threat actor targets government organizations and entities in the financial, petrochemical, and transportation sectors for espionage purposes.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>This threat actor targets government organizations and entities in the financial, petrochemical, and transportation sectors for espionage purposes.<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_cloudinary_featured_overwrite":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[3],"tags":[],"cyber_operation":[],"state_sponsor":[76],"victim_category":[63,138],"victim_government_response":[186],"victim":[4,12,13,45,77,80,139,145,178],"class_list":["post-11018","post","type-post","status-publish","format-standard","hentry","category-threat-actor","state_sponsor-iran-islamic-republic-of","victim_category-government","victim_category-private-sector","victim_government_response-unknown","victim-afghanistan","victim-azerbaijan","victim-bahrain","victim-egypt","victim-iran-islamic-republic-of","victim-israel","victim-qatar","victim-saudi-arabia","victim-united-arab-emirates"],"acf":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/posts\/11018","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/comments?post=11018"}],"version-history":[{"count":0,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/posts\/11018\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/media?parent=11018"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/categories?post=11018"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/tags?post=11018"},{"taxonomy":"cyber_operation","embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/cyber_operation?post=11018"},{"taxonomy":"state_sponsor","embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/state_sponsor?post=11018"},{"taxonomy":"victim_category","embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/victim_category?post=11018"},{"taxonomy":"victim_government_response","embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/victim_government_response?post=11018"},{"taxonomy":"victim","embeddable":true,"href":"https:\/\/www.cfr.org\/cyber-operations\/wp-json\/wp\/v2\/victim?post=11018"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}