{
  "name": "DragonRank, a Chinese-speaking SEO manipulator service provider",
  "slug": "dragonrank-a-chinese-speaking-seo-manipulator-service-provider",
  "description": "Cisco Talos is disclosing a new threat called \u201cDragonRank\u201d that primarily targets countries in Asia and a few in Europe, operating PlugX and BadIIS for search engine optimization (SEO) rank manipulation.",
  "published": "2024-09-12T19:27:32+00:00",
  "created_at": "2024-09-12T19:27:32+00:00",
  "modified_at": "2024-09-12T20:08:45+00:00",
  "created_at_opencti": "2024-09-12T19:27:32+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2024-09-12",
    "badiis malware",
    "badpotato",
    "black",
    "c cd",
    "dragonrank",
    "illusion",
    "metasploit",
    "mimikatz",
    "plugx",
    "plugx loader"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "154.23.179.133"
      },
      {
        "id": "",
        "name": "202.162.108.48"
      },
      {
        "id": "",
        "name": "www.yx52.pw"
      },
      {
        "id": "",
        "name": "ddos.tttseo.com"
      },
      {
        "id": "",
        "name": "mail.tttseo.com"
      },
      {
        "id": "",
        "name": "admin1.tttseo.com"
      },
      {
        "id": "",
        "name": "tttseo.com"
      },
      {
        "id": "",
        "name": "a.googie.pw"
      },
      {
        "id": "",
        "name": "ffa94d76d4423e43a42c7944c512e1a71827a89ad513d565f82eb8fe374ef74d"
      },
      {
        "id": "",
        "name": "fd0dd6c05be458e18640db3eaaa9f6d259c1224f244110595b0a634fffacadf9"
      },
      {
        "id": "",
        "name": "f3f95debb843d6faf41c6884e1e7541dcff5fe1c47014914d895aaad757e0159"
      },
      {
        "id": "",
        "name": "cdc9f18de75991e7b289ab26b32dca9f4de6f95f88a6d3d32c87a111c4dc4d18"
      },
      {
        "id": "",
        "name": "e9a9f3c7321d83e781c00eed712f9ecffc2024fd41ee1e45bc77d2ff8b1264d1"
      },
      {
        "id": "",
        "name": "c8cfb43414cd425eede08a6267a0cdf3789175dfba95a903ee9dfa0ae2e94a8b"
      },
      {
        "id": "",
        "name": "ad7773cb9e55e4c37bed2bb34a9e695c8965cc12c75b3da5e12f868fc1c78a52"
      },
      {
        "id": "",
        "name": "b9faf82542bbaca124ef80f58ee55a866ee10481fa30419c89f112d7bb4a9815"
      },
      {
        "id": "",
        "name": "b3aa822a7349d95c2210598b95fa8e85c1ce0f22acdf10611a31e3e82c84ed33"
      },
      {
        "id": "",
        "name": "99ab43bf8a9934d01ba9ec6203c95e3c16e6c0dfc633538ab29795ba979b4adf"
      },
      {
        "id": "",
        "name": "96d5f775fca96cfe092e94bd1b978be215fd3d52e0fe1cc15bc61d787c122c85"
      },
      {
        "id": "",
        "name": "94b323eaf06ea503bf0157c575128e46083257b8ee71d4e5faa7ca4d38e50f8c"
      },
      {
        "id": "",
        "name": "72fc4ba4d8e9a7b11fa0b76611e85b7aaf3558ac08dc8e9628fad48d72fb8190"
      },
      {
        "id": "",
        "name": "875239000f22cff75f62f9a1aa9924a8c3fea72124b0c4b31c7b3814f9dc0601"
      },
      {
        "id": "",
        "name": "74063aeff534b824ad3f505431e56875c1fd73dfd95be7972defaf0719120406"
      },
      {
        "id": "",
        "name": "614920f1a8550070a983f2ad22d6358c6742a9e02802b025eeea8db8c3d41fb7"
      },
      {
        "id": "",
        "name": "6430651ce3d7ab9771bdd2701d2ab953929ba8099d272f390bb263a136f8f815"
      },
      {
        "id": "",
        "name": "6e5eb43b81f103e4926be92d6bef9048bfa042bddb95a1ad3245230df0e04d22"
      },
      {
        "id": "",
        "name": "45f21f20af0482092cdcc9d00c0657f000fac3c31fc3aeebe78ee1a397b914b3"
      },
      {
        "id": "",
        "name": "42e99d6292f5e32592769735fc7736855a4167a40243bde671af7d47cd59003d"
      },
      {
        "id": "",
        "name": "3f17c66aab154212fb02fc7e329296c233aebe4abd9248204fa99c490c113a6e"
      },
      {
        "id": "",
        "name": "373d95685d0fd184aa4d5e47f7b1eb1848badef4fc9db46415f858f37eb20eee"
      },
      {
        "id": "",
        "name": "1749b814522ba5dc141b399ee8f04616d72bfdfdd8ab8ebab6c9d494a378cbfc"
      },
      {
        "id": "",
        "name": "0ab7e992aa85a0e23d9a7ee1e3928eb2015c0733d7fb324bf8b0c0e3c65d500b"
      },
      {
        "id": "",
        "name": "f748b210677a44597a724126a3d97173d97840b59d6deaf010c370657afc01f8"
      },
      {
        "id": "",
        "name": "785d92dc175cb6b7889f07aa2a65d6c99e59dc1bbc9edb8f5827668fd249fa2e"
      },
      {
        "id": "",
        "name": "046a03725df3104d02fa33c22e919cc73bed6fd6a905098e98c07f0f1b67fadb"
      }
    ],
    "malware": [
      {
        "id": "6158185d-0df3-4cb8-a41d-7ac11735e4a9",
        "name": "DragonRank",
        "slug": "dragonrank"
      },
      {
        "id": "legacy:malware:3460f9c45de58af2",
        "name": "PlugX",
        "slug": "plugx"
      }
    ],
    "attack_patterns": [
      {
        "id": "6b5f1e68-aec7-4ea0-9777-62156da790a7",
        "name": "T1069"
      },
      {
        "id": "19ce62bb-3faf-4d09-90b1-d82fce1ba8b0",
        "name": "T1136"
      },
      {
        "id": "fe6f2946-a01e-460c-9636-8c48b45dd0e6",
        "name": "T1189"
      },
      {
        "id": "a72b6e11-a5d5-4f5a-8f0d-8861e90c34f7",
        "name": "T1555"
      },
      {
        "id": "eb118bf2-fdf2-4b49-a470-0acabf7608ad",
        "name": "T1505"
      },
      {
        "id": "fc699aef-8931-4a79-8f79-9651be9abd50",
        "name": "T1021"
      },
      {
        "id": "743d2e0c-e5d5-4ccb-a6bd-0035c4e88c37",
        "name": "T1176"
      },
      {
        "id": "dc17cbbd-40d8-43cf-b3cf-50d1276db2c7",
        "name": "T1016"
      },
      {
        "id": "53b3b18c-d0d0-4bf6-bc6b-2c0ab9180deb",
        "name": "T1070"
      },
      {
        "id": "70616b2f-4019-4963-b758-5d9f6f20e201",
        "name": "T1082"
      },
      {
        "id": "c473a756-355a-42ad-a0df-cd3a8fa006d1",
        "name": "T1057"
      },
      {
        "id": "cbd87c8c-3bed-461a-acef-56ffc8b87571",
        "name": "T1105"
      },
      {
        "id": "870bd958-53a3-4d25-9f23-00aa8bd6674d",
        "name": "T1102"
      },
      {
        "id": "c3af9fd7-d307-4df4-9220-cc627938fb85",
        "name": "T1055"
      },
      {
        "id": "7d7ac733-6442-416f-8669-c302dd0843b9",
        "name": "T1036"
      },
      {
        "id": "41ad5d62-aa6a-47d6-a9a9-fb2209601099",
        "name": "T1098"
      },
      {
        "id": "5b7c66d1-0466-4ba7-af6f-eb82c2f9d05b",
        "name": "T1033"
      },
      {
        "id": "6aa7866f-9c1f-4159-938a-10a6adf41646",
        "name": "T1553"
      },
      {
        "id": "31d29704-da1c-47ea-b93f-76d368813bdf",
        "name": "T1560"
      },
      {
        "id": "d9b45b3b-d093-4016-89e9-48f31ff4d05d",
        "name": "T1566"
      },
      {
        "id": "ca53b2fa-42a8-45ec-9682-0cf54bf280f3",
        "name": "T1090"
      },
      {
        "id": "74d6e294-54d1-4a21-9dfc-df5870f8ec8e",
        "name": "T1003"
      },
      {
        "id": "9b6064e6-a05b-4e95-baf5-34d180bc9221",
        "name": "T1059"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "Belgium"
      },
      {
        "id": "",
        "name": "Netherlands"
      },
      {
        "id": "",
        "name": "Sports"
      },
      {
        "id": "",
        "name": "Agriculture"
      },
      {
        "id": "",
        "name": "Healthcare"
      },
      {
        "id": "",
        "name": "Media"
      },
      {
        "id": "",
        "name": "Transportation"
      },
      {
        "id": "",
        "name": "Government"
      },
      {
        "id": "",
        "name": "Manufacturing"
      }
    ]
  },
  "external_refs": [
    "https://blog.talosintelligence.com/dragon-rank-seo-poisoning/",
    "https://otx.alienvault.com/pulse/66e35cc56564ce355f0f7daa"
  ]
}