[{"id":"dwm-001","source":"DarkOwl (LAB feed)","discovered_at":"2026-05-02T01:10:00Z","confidence_score":87,"severity":"high","affected_asset":"Keensafe Global Bank","evidence":"Forum 'CryptBB' — actor 'silent_finch' offering 'EU bank initial-access broker, Keensafe target' for 1.4 BTC.","recommended_action":"Engage threat-intel reseller for actor profile; tighten admin-panel allowlist.","mitre_mapping":["T1593.001","T1078"],"compliance_mapping":["DORA Art.10","NIST CSF DE.CM-1"]},{"id":"dwm-002","source":"Telegram monitor (LAB)","discovered_at":"2026-04-30T16:42:00Z","confidence_score":78,"severity":"medium","affected_asset":"keensafeglobalbank.com","evidence":"Channel @phishpros — preview of phishing kit referencing 'keensafe-secure-login.com'.","recommended_action":"Cross-correlate with typosquat tsq-005; expedite takedown.","mitre_mapping":["T1566.002"],"compliance_mapping":["GDPR Art.34"]},{"id":"dwm-003","source":"Russian-language forum (LAB)","discovered_at":"2026-04-26T13:02:00Z","confidence_score":68,"severity":"medium","affected_asset":"Keensafe customers","evidence":"Stealer log advert mentions 'EU online banking, keensafe' as one of N targets.","recommended_action":"Treat as broad campaign; raise customer awareness.","mitre_mapping":["T1555"],"compliance_mapping":["DORA Art.19"]}]