{
  "name": "Marko Polo Navigates Uncharted Waters with Infostealer Empire",
  "slug": "marko-polo-navigates-uncharted-waters-with-infostealer-empire",
  "description": "An analysis has uncovered a highly adaptable cybercriminal group, codenamed 'Marko Polo', that operates sophisticated scams employing information-stealing malware to target individuals and organizations globally. They primarily operate through social media, impersonating legitimate brands in sectors like online gaming, virtual meetings, productivity software, and cryptocurrency. Their extensive operation involves over 30 distinct scams, 50 malware payloads, numerous malicious domains, and hundreds of fraudulent social media accounts. This widespread campaign likely compromised tens of thousands of devices globally, exposing sensitive personal and corporate data, posing risks to consumer privacy and business continuity while generating substantial illicit revenue.",
  "published": "2024-09-17T17:51:18+00:00",
  "created_at": "2024-09-17T17:51:18+00:00",
  "modified_at": "2024-09-17T18:40:05+00:00",
  "created_at_opencti": "2024-09-17T17:51:18+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2024-09-17",
    "cybercriminal",
    "impersonation",
    "infostealers",
    "marko polo",
    "scams",
    "social_engineering"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "79.137.202.22"
      },
      {
        "id": "",
        "name": "45.156.27.45"
      },
      {
        "id": "",
        "name": "45.156.27.196"
      },
      {
        "id": "",
        "name": "188.130.207.115"
      },
      {
        "id": "",
        "name": "147.45.43.197"
      },
      {
        "id": "",
        "name": "194.116.217.148"
      },
      {
        "id": "",
        "name": "147.45.43.136"
      },
      {
        "id": "",
        "name": "79.137.197.159"
      },
      {
        "id": "",
        "name": "77.221.151.54"
      },
      {
        "id": "",
        "name": "193.233.132.137"
      },
      {
        "id": "",
        "name": "fa634cee8d9b6d25081c943ca1c9156f846b7915ce2cba4f01329cc411e6e081"
      },
      {
        "id": "",
        "name": "f7dcc0c21c78db4698e03bf787c4d9329c4ec9fca1c546903a3af34d9c05d449"
      },
      {
        "id": "",
        "name": "de78d04f0c049d53a40c4af5589a18aee85bd6a40fce7ad6114e421921ebfb93"
      },
      {
        "id": "",
        "name": "d9f006c0b4cd266e641424865631091a125b4c95ae53b8341af1d9988de94383"
      },
      {
        "id": "",
        "name": "d17cb6113ccf97b7bc0d02da26afa766bea2e5067e745fab574b0b5b78880065"
      },
      {
        "id": "",
        "name": "cf8f04c3f1be5a27acbcaf08a2f0461ee48d2b4d48ddaca87904cb7c9831ab51"
      },
      {
        "id": "",
        "name": "cbfb45a16512c901cdfa9eff356bd7f139edc0c51133733ba80a7c0d9d1a2a61"
      },
      {
        "id": "",
        "name": "c7fa247cd265cbaf766be6a041fc18ecf6380ee41196ad3b7d36bc61c1130118"
      },
      {
        "id": "",
        "name": "c6c76d3dad043e0d516d446ca438727ddec6bd978f77eea768d6eaeb216a84d1"
      },
      {
        "id": "",
        "name": "c0a1c698a5d84366a7f2b64751ee0a69f5e4887e0a0bc62841fae6d9f33417aa"
      },
      {
        "id": "",
        "name": "9c2c9dd2cd873c8999c3631aac8a34f32f1efed54dd31fe47527d842185ff92d"
      },
      {
        "id": "",
        "name": "9a7a070029bb51daf70514402e9f6aeed4acd46a18c13478ddd3fa242a9f8a95"
      },
      {
        "id": "",
        "name": "9099108338539e613d8fce7067b9e69d9cf09d1082bbedc0718c9f6d77e46288"
      },
      {
        "id": "",
        "name": "87806649eaabc3da46a8ef6a983d561f8716d24dee9406bf2cd68b914c6a06a3"
      },
      {
        "id": "",
        "name": "77ee7274f0a8208fccefb0138258421113554281bdf21e4d9f25fe6b11856dc4"
      },
      {
        "id": "",
        "name": "724d7e92e789640991c1066399cdd96f9ddfb7a59d42fd9d8d7e2bf48d39bc2d"
      },
      {
        "id": "",
        "name": "6798c877acdbcc2feec0f43fda970bc0428d8a9a7394e72325ae8cbd5e150602"
      },
      {
        "id": "",
        "name": "66f085adee21f3c30ad6d7b8273a4ccac395b958536f7daf3a1772e768ee70cc"
      },
      {
        "id": "",
        "name": "66085c5ac7b06960e90d4babc1a3e92fb57eaf557f61cc605865950039398a59"
      },
      {
        "id": "",
        "name": "61db02e38f376e6639130ed344498b7ad190006e9e7eea46a98f83001bb419dd"
      },
      {
        "id": "",
        "name": "56adf4dfb61292ceef302e1988ac2ba4551109186ad1c9f3ce87d11914157b0c"
      },
      {
        "id": "",
        "name": "5528e226b747abad7e843e6d7f92f48dda13f626a766285b2e889bd8fc746b12"
      },
      {
        "id": "",
        "name": "5068e7c3a1822f2f66bc99a8b20d86d66a72a828c9d01214a076a415826667ce"
      },
      {
        "id": "",
        "name": "374fe0a3bd4b4dc99e1e07976fc0171c28a86f34d6810bc77e69bc58ccd764c7"
      },
      {
        "id": "",
        "name": "35be11ddfa4f1d776f0b6b814a325f50189100222fe04436a50563c89c2a02bd"
      },
      {
        "id": "",
        "name": "35b9d0b528f576048ea10c9087010b4df0b5d05a9c8af8a3b88e1b88b607f08f"
      },
      {
        "id": "",
        "name": "257476099858ef9d284a0cf5be8e442ec59d30f4453b3807c8e5fcf091b07f6d"
      },
      {
        "id": "",
        "name": "2f32a84122f86e686f93debcf02b635b0339c6d0b085e02419dff1eaa5724ec0"
      },
      {
        "id": "",
        "name": "222e01ce240bf795a31775bfbd74806dd904af514935308cc89188aa1c05b621"
      },
      {
        "id": "",
        "name": "1c8705af8ea8598cf5d0b7af572d7e50540bfc146fa1c2ea0859ac554d088b0b"
      },
      {
        "id": "",
        "name": "16c1c1b15f8473f1babbbcae1124c7481e9a4e25331beeae5611dc4f153e7b4b"
      },
      {
        "id": "",
        "name": "0b5b9d6be11c9a806763741d52d0e186e6f0e9e54d124fa2fa0374d2465599f5"
      },
      {
        "id": "",
        "name": "0b4f5327c6c89f8aa2d642fc7a1955bc90ffcd8b41f21974517b7f58c3ed7323"
      },
      {
        "id": "",
        "name": "00a0cb5fb4053ba9a04920ca023aae50859af4bd15fd31286ebca6d0d97f3852"
      },
      {
        "id": "",
        "name": "609129a9188ca3d16832594d44d746d7434e67a99c6dd20c1785aface9ed117d"
      },
      {
        "id": "",
        "name": "bde29a5215e685805f00fee5f03de3478f8214195ecf93fb81562bcd6122149d"
      },
      {
        "id": "",
        "name": "856979042a3c1f61050cc08e8f11856dc714ec16969bd0fc562fd47c9e6c8e4c"
      }
    ],
    "malware": [
      {
        "id": "5a707c14-0cb1-4113-a7f6-02c0c32699e3",
        "name": "HijackLoader",
        "slug": "hijackloader"
      },
      {
        "id": "54a0b340-b33e-4644-8a5a-68eea8cca00d",
        "name": "StealC",
        "slug": "stealc"
      },
      {
        "id": "8c5873bd-8c1c-4e93-8886-13a7ef885db7",
        "name": "Rhadamanthys",
        "slug": "rhadamanthys"
      }
    ],
    "intrusion_sets": [
      {
        "id": "4b1c5a50-5fc7-4c4a-ba3b-e5378f76db30",
        "name": "Marko Polo",
        "slug": "marko-polo"
      }
    ],
    "attack_patterns": [
      {
        "id": "52b92395-d3d3-4e05-976a-0fccccfce8d2",
        "name": "T1566.002"
      },
      {
        "id": "fe6f2946-a01e-460c-9636-8c48b45dd0e6",
        "name": "T1189"
      },
      {
        "id": "c9ee9b30-ba84-4c24-95e9-e8242d42af3f",
        "name": "T1071.001"
      },
      {
        "id": "196f2a64-c55b-47a6-8e38-beb76ba700b6",
        "name": "T1204.002"
      },
      {
        "id": "97d377d8-89c7-48f8-a79f-0f48bd60df74",
        "name": "T1005"
      },
      {
        "id": "70616b2f-4019-4963-b758-5d9f6f20e201",
        "name": "T1082"
      },
      {
        "id": "dc410646-9cdd-427b-92e7-179a54f78f90",
        "name": "T1566.001"
      },
      {
        "id": "a831f7c4-a7f0-4243-8211-1cd44fa34fa7",
        "name": "T1020"
      },
      {
        "id": "0c836307-129e-4ff7-a532-180c633cacba",
        "name": "T1027"
      },
      {
        "id": "fa3b8b48-d97c-4242-83a6-07d435a5a79e",
        "name": "T1041"
      },
      {
        "id": "74d6e294-54d1-4a21-9dfc-df5870f8ec8e",
        "name": "T1003"
      }
    ]
  },
  "external_refs": [
    "https://go.recordedfuture.com/hubfs/reports/cta-2024-0917.pdf",
    "https://otx.alienvault.com/pulse/66e9ddb687d7b95a199e3098"
  ]
}