{
  "name": "Master of Puppets: Uncovering the pro-Russian influence campaign",
  "slug": "master-of-puppets-uncovering-the-pro-russian-influence-campaign",
  "description": "The DoppelG\u00e4nger campaign is an ongoing influence operation attributed to Russian entities Structura and the Social Design Agency. Its primary goal is to diminish support for Ukraine and foster divisions within supporting nations. It targets audiences in several Western countries through a network of news websites publishing disinformation articles amplified via inauthentic social media accounts across multiple platforms. The campaign demonstrates an ability to tailor narratives to specific countries and current events, adapting its targeting and tactics.",
  "published": "2024-05-21T06:22:34+00:00",
  "created_at": "2024-05-21T06:22:34+00:00",
  "modified_at": "2024-05-21T11:06:36+00:00",
  "created_at_opencti": "2024-05-21T06:22:34+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2024-05-21",
    "apt",
    "disinformation",
    "influence"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "64.190.113.45"
      },
      {
        "id": "",
        "name": "206.71.148.217"
      },
      {
        "id": "",
        "name": "206.188.197.119"
      },
      {
        "id": "",
        "name": "195.85.115.36"
      },
      {
        "id": "",
        "name": "206.188.197.116"
      },
      {
        "id": "",
        "name": "zrzzje.academicwriters.info"
      },
      {
        "id": "",
        "name": "zplsdj.16c10.com"
      },
      {
        "id": "",
        "name": "zpepsz.se5pro.co.uk"
      },
      {
        "id": "",
        "name": "znh94x.grupoametista.online"
      },
      {
        "id": "",
        "name": "zmivco.northernenviortech.com"
      },
      {
        "id": "",
        "name": "zm6hh2.khach-hang-ca-nhan-v-n.com"
      },
      {
        "id": "",
        "name": "zjksjp.norfolkcustomconcrete.com"
      },
      {
        "id": "",
        "name": "zhe455.accesspromarket.live"
      },
      {
        "id": "",
        "name": "yzl45b.depolumi5.click"
      },
      {
        "id": "",
        "name": "vls6oj.mountainslife.xyz"
      },
      {
        "id": "",
        "name": "v2mn9i.rating-cred26.buzz"
      },
      {
        "id": "",
        "name": "test-auth.argonlabs.ru"
      },
      {
        "id": "",
        "name": "rg.urldirect.ru"
      },
      {
        "id": "",
        "name": "m7rwtu.whencontact.com"
      },
      {
        "id": "",
        "name": "lu531k.vibor-cred96.buzz"
      },
      {
        "id": "",
        "name": "kgdr3b.froggy.lol"
      },
      {
        "id": "",
        "name": "hjwbdb.renderny.com"
      },
      {
        "id": "",
        "name": "f859cj.brisks.shop"
      },
      {
        "id": "",
        "name": "est.dafen.ru"
      },
      {
        "id": "",
        "name": "dev.dafen.ru"
      },
      {
        "id": "",
        "name": "d4mt2p.kredyt-kr33.buzz"
      },
      {
        "id": "",
        "name": "cxskm6.ugandanchemist.com"
      },
      {
        "id": "",
        "name": "c8re5h.cheatinject.space"
      },
      {
        "id": "",
        "name": "cgocn5.penisbreakfast.com"
      },
      {
        "id": "",
        "name": "bafq5v.theironforest.com"
      },
      {
        "id": "",
        "name": "b34ibw.fbcaseappeal34512742794167.live"
      },
      {
        "id": "",
        "name": "40pg96.risebedutt07.club"
      },
      {
        "id": "",
        "name": "zmkmayak.ru"
      },
      {
        "id": "",
        "name": "younais.com"
      },
      {
        "id": "",
        "name": "voshod-agency.ru"
      },
      {
        "id": "",
        "name": "todaybrings.ru"
      },
      {
        "id": "",
        "name": "thinkwritepost.com"
      },
      {
        "id": "",
        "name": "thevegasstakes.com"
      },
      {
        "id": "",
        "name": "thetoycrew.com"
      },
      {
        "id": "",
        "name": "thetoiletpaperman.com"
      },
      {
        "id": "",
        "name": "sociallords.com"
      },
      {
        "id": "",
        "name": "stemduniya.com"
      },
      {
        "id": "",
        "name": "seckinyayincilik.com"
      },
      {
        "id": "",
        "name": "saivitecreation.com"
      },
      {
        "id": "",
        "name": "safevpn-app.com"
      },
      {
        "id": "",
        "name": "rustomega.com"
      },
      {
        "id": "",
        "name": "rulesascode.com"
      },
      {
        "id": "",
        "name": "ruffai.com"
      },
      {
        "id": "",
        "name": "ruf-des-reiches.com"
      },
      {
        "id": "",
        "name": "roysel.com"
      },
      {
        "id": "",
        "name": "roomworkout.com"
      },
      {
        "id": "",
        "name": "rockdogtech.com"
      },
      {
        "id": "",
        "name": "reedleycornerstonecommunitychurch.com"
      },
      {
        "id": "",
        "name": "realulim.com"
      },
      {
        "id": "",
        "name": "protodsp.ru"
      },
      {
        "id": "",
        "name": "pro-gymuk.com"
      },
      {
        "id": "",
        "name": "plusdates.com"
      },
      {
        "id": "",
        "name": "pkjobs23.com"
      },
      {
        "id": "",
        "name": "paypalcheck.com"
      },
      {
        "id": "",
        "name": "pawbiiotix.com"
      },
      {
        "id": "",
        "name": "nnewws.ru"
      },
      {
        "id": "",
        "name": "newsroad.online"
      },
      {
        "id": "",
        "name": "newsbd.ru"
      },
      {
        "id": "",
        "name": "myfreshnews.ru"
      },
      {
        "id": "",
        "name": "mundowao.com"
      },
      {
        "id": "",
        "name": "mspbazar.com"
      },
      {
        "id": "",
        "name": "mmawire.com"
      },
      {
        "id": "",
        "name": "momixapkdownload.com"
      },
      {
        "id": "",
        "name": "misterwindowanddoor.com"
      },
      {
        "id": "",
        "name": "milloa.com"
      },
      {
        "id": "",
        "name": "minsetguru.com"
      },
      {
        "id": "",
        "name": "meetfinancialsidekick.com"
      },
      {
        "id": "",
        "name": "manojrawniar.com"
      },
      {
        "id": "",
        "name": "matiasbenavides.com"
      },
      {
        "id": "",
        "name": "maddiecrum.com"
      },
      {
        "id": "",
        "name": "littlecrumblybits.com"
      },
      {
        "id": "",
        "name": "letsfind123.com"
      },
      {
        "id": "",
        "name": "lastminutenews.ru"
      },
      {
        "id": "",
        "name": "kiddosdeals.com"
      },
      {
        "id": "",
        "name": "kenevirinfaydalari.com"
      },
      {
        "id": "",
        "name": "kamnarajput.com"
      },
      {
        "id": "",
        "name": "jlaworld.com"
      },
      {
        "id": "",
        "name": "jiajamfit.com"
      },
      {
        "id": "",
        "name": "jetcarsrentacar.com"
      },
      {
        "id": "",
        "name": "invierteseguroenmiami.com"
      },
      {
        "id": "",
        "name": "intsightful.com"
      },
      {
        "id": "",
        "name": "interactiveleap.com"
      },
      {
        "id": "",
        "name": "incredipoll.com"
      },
      {
        "id": "",
        "name": "ikkyle.com"
      },
      {
        "id": "",
        "name": "heavycreambags.com"
      },
      {
        "id": "",
        "name": "guzzlerspubpos.com"
      },
      {
        "id": "",
        "name": "healthsuggetions.com"
      },
      {
        "id": "",
        "name": "grumpymomma.com"
      },
      {
        "id": "",
        "name": "greatroomservice.info"
      },
      {
        "id": "",
        "name": "govreadyq.com"
      },
      {
        "id": "",
        "name": "globalindustires.com"
      },
      {
        "id": "",
        "name": "glowforgeusergroup.com"
      },
      {
        "id": "",
        "name": "gestarcare.com"
      },
      {
        "id": "",
        "name": "gevirts.com"
      },
      {
        "id": "",
        "name": "frontiersemiconductor.com"
      },
      {
        "id": "",
        "name": "freexp3series.com"
      },
      {
        "id": "",
        "name": "freemit.com"
      },
      {
        "id": "",
        "name": "flexwe.com"
      },
      {
        "id": "",
        "name": "fionaparr.com"
      },
      {
        "id": "",
        "name": "flexkopanalo.top"
      },
      {
        "id": "",
        "name": "financiallyfitemployee.com"
      },
      {
        "id": "",
        "name": "fastnep.com"
      },
      {
        "id": "",
        "name": "etherdatalabs.com"
      },
      {
        "id": "",
        "name": "emverticales.com"
      },
      {
        "id": "",
        "name": "emdrnearme.com"
      },
      {
        "id": "",
        "name": "edurustoday.ru"
      },
      {
        "id": "",
        "name": "ecboteltekstil.com"
      },
      {
        "id": "",
        "name": "dreamgeorgia.com"
      },
      {
        "id": "",
        "name": "dumonmap.com"
      },
      {
        "id": "",
        "name": "doublerproperty.com"
      },
      {
        "id": "",
        "name": "docnanb.com"
      },
      {
        "id": "",
        "name": "daileaf.com"
      },
      {
        "id": "",
        "name": "contrictor.com"
      },
      {
        "id": "",
        "name": "companyrush.com"
      },
      {
        "id": "",
        "name": "charayaassociates.com"
      },
      {
        "id": "",
        "name": "cerrajerosviladecans.online"
      },
      {
        "id": "",
        "name": "cdsofiowa.com"
      },
      {
        "id": "",
        "name": "carolynjettproperty.com"
      },
      {
        "id": "",
        "name": "buymeagradient.com"
      },
      {
        "id": "",
        "name": "bookingyatri.com"
      },
      {
        "id": "",
        "name": "blazetrucks.com"
      },
      {
        "id": "",
        "name": "bitsdepartment.online"
      },
      {
        "id": "",
        "name": "beecontrolparadisevalleyaz.com"
      },
      {
        "id": "",
        "name": "avtechdaddy.com"
      },
      {
        "id": "",
        "name": "aviatotventure.com"
      },
      {
        "id": "",
        "name": "arturbichoev.com"
      },
      {
        "id": "",
        "name": "argondigital.pro"
      },
      {
        "id": "",
        "name": "argonlabs.pro"
      },
      {
        "id": "",
        "name": "americanatectana.com"
      },
      {
        "id": "",
        "name": "ambeey.com"
      },
      {
        "id": "",
        "name": "altgoat.com"
      },
      {
        "id": "",
        "name": "alfonrust.com"
      },
      {
        "id": "",
        "name": "akramir.com"
      },
      {
        "id": "",
        "name": "aimbrilliant.com"
      },
      {
        "id": "",
        "name": "adventistya.com"
      },
      {
        "id": "",
        "name": "adoazra.com"
      },
      {
        "id": "",
        "name": "711ggr.com"
      },
      {
        "id": "",
        "name": "590lotto.com"
      },
      {
        "id": "",
        "name": "zj8cp5.fasty.org.uk"
      },
      {
        "id": "",
        "name": "zhsqmc.welovequran.com"
      },
      {
        "id": "",
        "name": "zgb1pt.hungryhenrietta.com"
      },
      {
        "id": "",
        "name": "ze2vt3.yamadeko187.click"
      },
      {
        "id": "",
        "name": "zacedf.cypressnewsgh.online"
      },
      {
        "id": "",
        "name": "yrxibe.elembajadordelapampa.com"
      },
      {
        "id": "",
        "name": "ytbw95.kredit-money-fun284.buzz"
      },
      {
        "id": "",
        "name": "yrh431.protradeindia.com"
      },
      {
        "id": "",
        "name": "yrd1iz.nutribargains.life"
      },
      {
        "id": "",
        "name": "ypxlhq.mayavati.online"
      },
      {
        "id": "",
        "name": "ymcz5z.emaarindia62.com"
      },
      {
        "id": "",
        "name": "ypj9em.biogolden.site"
      },
      {
        "id": "",
        "name": "ykycoi.appleid-iosdevice.info"
      },
      {
        "id": "",
        "name": "ykr195.theoceanartcompany.com"
      },
      {
        "id": "",
        "name": "ykts2v.luismillares.store"
      },
      {
        "id": "",
        "name": "yio4t3.real-credits-snap116.buzz"
      },
      {
        "id": "",
        "name": "ygdpd1.karritech.co.uk"
      },
      {
        "id": "",
        "name": "yfljmd.whencontact.com"
      },
      {
        "id": "",
        "name": "yfaoli.cemerytasui.info"
      },
      {
        "id": "",
        "name": "yea52d.informationforeveryone.org"
      },
      {
        "id": "",
        "name": "y1z85z.bestlimitedoffer.store"
      },
      {
        "id": "",
        "name": "y5j23h.incawonders.com"
      },
      {
        "id": "",
        "name": "xvjxj7.indianmandirs.com"
      },
      {
        "id": "",
        "name": "xywsho.hurkushackteam.org"
      },
      {
        "id": "",
        "name": "xmyaqs.homeopathypjnhmc.edu.in"
      },
      {
        "id": "",
        "name": "xr2x9u.kbbet1.life"
      },
      {
        "id": "",
        "name": "xu71vo.grocerysphere.com"
      },
      {
        "id": "",
        "name": "xfx6hd.c-majac-ann15.buzz"
      },
      {
        "id": "",
        "name": "xbqaz5.coinmaster.world"
      },
      {
        "id": "",
        "name": "x7r8nz.santsuono.club"
      },
      {
        "id": "",
        "name": "x0fxvm.antipandemicsupplies.com"
      },
      {
        "id": "",
        "name": "wrbb8d.karritech.co.uk"
      },
      {
        "id": "",
        "name": "x76yrj.start-cred-history118.buzz"
      },
      {
        "id": "",
        "name": "wi7brv.tanpapenyesalan.click"
      },
      {
        "id": "",
        "name": "wmpp73.speaiker.com"
      },
      {
        "id": "",
        "name": "who9g3.balala.tech"
      },
      {
        "id": "",
        "name": "wh3kmz.digipanservices.in"
      },
      {
        "id": "",
        "name": "wflfks.start-cred-history90.buzz"
      },
      {
        "id": "",
        "name": "wgwkkc.slimminggummiesofficial.store"
      },
      {
        "id": "",
        "name": "w7fs5u.testingarsip.xyz"
      },
      {
        "id": "",
        "name": "w4x964.cepatlahini93.click"
      },
      {
        "id": "",
        "name": "w9rpgr.getmobile.online"
      },
      {
        "id": "",
        "name": "w39vyh.zm-kariz-best114.buzz"
      },
      {
        "id": "",
        "name": "w4ux1u.zaksi-kred-mx23.buzz"
      },
      {
        "id": "",
        "name": "w3yr6b.khidmatkhalq.com"
      },
      {
        "id": "",
        "name": "vv5md4.parmarthyogashram.com"
      },
      {
        "id": "",
        "name": "vxy9ts.rentranking.online"
      },
      {
        "id": "",
        "name": "vp53bj.shine-squadcleaning.store"
      },
      {
        "id": "",
        "name": "vi8bgj.garaj.site"
      },
      {
        "id": "",
        "name": "vmtu1y.yellowbarrels.co.uk"
      },
      {
        "id": "",
        "name": "vddxlv.worldcryptomining.live"
      },
      {
        "id": "",
        "name": "va63pm.rating-cred164.buzz"
      },
      {
        "id": "",
        "name": "vcahd4.fitspressousa.com"
      },
      {
        "id": "",
        "name": "v5utyg.great-cred50.buzz"
      },
      {
        "id": "",
        "name": "v3ix3z.rou.bar"
      },
      {
        "id": "",
        "name": "v029ec.ger4098764793ggwhit3.online"
      },
      {
        "id": "",
        "name": "uw79hp.reyt-cre-ann44.buzz"
      }
    ],
    "attack_patterns": [
      {
        "id": "a2ba5594-6293-4868-928c-ab4b31927a02",
        "name": "T1572"
      },
      {
        "id": "00430919-9257-403b-8a1b-958d4c3613aa",
        "name": "T1557"
      },
      {
        "id": "33962583-7396-47ef-913d-1db78d6685c9",
        "name": "T1569"
      },
      {
        "id": "306ee8dc-1d64-4916-96be-18060d690ad7",
        "name": "T1499"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "Slovakia"
      },
      {
        "id": "",
        "name": "Lithuania"
      },
      {
        "id": "",
        "name": "Switzerland"
      },
      {
        "id": "",
        "name": "Italy"
      },
      {
        "id": "",
        "name": "France"
      },
      {
        "id": "",
        "name": "Germany"
      },
      {
        "id": "",
        "name": "United Kingdom of Great Britain and Northern Ireland"
      },
      {
        "id": "",
        "name": "Ukraine"
      },
      {
        "id": "",
        "name": "Israel"
      },
      {
        "id": "",
        "name": "United States of America"
      }
    ]
  },
  "external_refs": [
    "https://blog.sekoia.io/master-of-puppets-uncovering-the-doppelganger-pro-russian-influence-campaign/",
    "https://blog.sekoia.io/master-of-puppets-uncovering-the-doppelganger-pro-russian-influence-campaign/#h-observables",
    "https://otx.alienvault.com/pulse/664c59cb06310789561d12dc"
  ]
}