APT Reports

Automated APT threat intelligence report downloader from Malpedia.

Prerequisites

Install uv and sync dependencies:

uv sync

Usage

# Download using pre-scraped metadata (862 actors)
uv run fetch.py --skip-scraping

# Full pipeline (scrape + download + wayback recovery)
uv run fetch.py

# Options
uv run fetch.py --max-actors 10        # Limit actors
uv run fetch.py --skip-to 100          # Skip first N actors
uv run fetch.py --skip-wayback         # Skip Wayback recovery

Data

data/apt-reports.json contains pre-scraped metadata for 862 APT actors from Malpedia, including actor names, aliases, malware families, and PDF references. Use --skip-scraping to download PDFs directly from this file.

Output

data/
├── malpedia/
│   ├── actors_metadata.json
│   ├── fetch_checkpoint.json
│   └── reports/
│       └── shared/
│           ├── 2020/
│           │   ├── report1.pdf
│           │   └── report2.pdf
│           ├── 2021/
│           └── ...
└── apt-reports.json (pre-scraped metadata)

Citation

Dmitruk, B. (2025). APT Reports: Automated APT Threat Intelligence Report Downloader.
https://github.com/hackerman70000/apt-reports

Contact

For questions or data access issues: bartek-dmitruk@protonmail.com

License

MIT