{
  "name": "Self-Proclaimed Meeting Software Vortax Spreads Infostealers, Unveils Expansive Network of Malicious macOS Applications",
  "slug": "self-proclaimed-meeting-software-vortax-spreads-infostealers-unveils-expansive-network-of-malicious-macos-applications",
  "description": "While monitoring data in Recorded Future Malware Intelligence, Insikt Group identified purported virtual\nmeeting software called Vortax that, upon download and installation, delivers three information stealers\n(\u201cinfostealers\u201d) in cross-platform attacks \u2014 Rhadamanthys, Stealc, and, most notably, Atomic macOS\nStealer (AMOS) \u2014 in an extensive campaign aimed at cryptocurrency theft.",
  "published": "2024-06-20T10:26:03+00:00",
  "created_at": "2024-06-20T10:26:03+00:00",
  "modified_at": "2024-06-20T10:42:26+00:00",
  "created_at_opencti": "2024-06-20T10:26:03+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2024-06-20",
    "c2",
    "macos"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "79.137.197.159"
      },
      {
        "id": "",
        "name": "89.105.198.134"
      },
      {
        "id": "",
        "name": "77.221.151.54"
      },
      {
        "id": "",
        "name": "193.233.132.137"
      },
      {
        "id": "",
        "name": "xhaxo.com"
      },
      {
        "id": "",
        "name": "weworkhappy.com"
      },
      {
        "id": "",
        "name": "vortax.space"
      },
      {
        "id": "",
        "name": "vortax.org"
      },
      {
        "id": "",
        "name": "vortax.io"
      },
      {
        "id": "",
        "name": "tripleplay-arg1.com"
      },
      {
        "id": "",
        "name": "showpiecekennelmating.com"
      },
      {
        "id": "",
        "name": "shinudating.com"
      },
      {
        "id": "",
        "name": "repairleatherla.com"
      },
      {
        "id": "",
        "name": "plumbonwater.com"
      },
      {
        "id": "",
        "name": "piloje.com"
      },
      {
        "id": "",
        "name": "pegamente.com"
      },
      {
        "id": "",
        "name": "nongduangmarket.com"
      },
      {
        "id": "",
        "name": "novatercaagilidade.com"
      },
      {
        "id": "",
        "name": "msjessd.com"
      },
      {
        "id": "",
        "name": "marylandhomerates.com"
      },
      {
        "id": "",
        "name": "iuddy.com"
      },
      {
        "id": "",
        "name": "institutoangelabatista.com"
      },
      {
        "id": "",
        "name": "indianahomerates.com"
      },
      {
        "id": "",
        "name": "hobbyplanners.com"
      },
      {
        "id": "",
        "name": "garagemfinity.com"
      },
      {
        "id": "",
        "name": "faruvinnovations.com"
      },
      {
        "id": "",
        "name": "eliteneatproductshop.com"
      },
      {
        "id": "",
        "name": "ebolight.com"
      },
      {
        "id": "",
        "name": "deskpaypal.com"
      },
      {
        "id": "",
        "name": "crosstacks.com"
      },
      {
        "id": "",
        "name": "crosscertify.com"
      },
      {
        "id": "",
        "name": "cheapcleanprotein.com"
      },
      {
        "id": "",
        "name": "casino-legrand.info"
      },
      {
        "id": "",
        "name": "betbhaibetting.com"
      },
      {
        "id": "",
        "name": "assetsreserve.com"
      },
      {
        "id": "",
        "name": "aidigibrain.com"
      },
      {
        "id": "",
        "name": "123mllhasbrasil.com"
      },
      {
        "id": "",
        "name": "f9785743539fdfb2199b53be57f86d5dba5c0cd3dfad1130de1532f92e0c7c4f"
      },
      {
        "id": "",
        "name": "f3176e0859ba92049dcd57685c1b5f49b97183ff49fcc79f2ce4ad2b31d2d843"
      },
      {
        "id": "",
        "name": "eb74c9dd0a0e3ea3cb31338c55e9e630fdee964a7b5967efcdfa8daa26a0f129"
      },
      {
        "id": "",
        "name": "dee705f4a513081afe9ab682b832068ac558ad3145038e57edc8109ab0e80769"
      },
      {
        "id": "",
        "name": "c34f8b6a299dd867a8d00b4fc50d91d9fdde4aa36f7c2a444aab4601dd4238e1"
      },
      {
        "id": "",
        "name": "be7e5707e5e399aedcfb2800d7039ff050500be3bafd217ca9200abed8bef03f"
      },
      {
        "id": "",
        "name": "bde29a5215e685805f00fee5f03de3478f8214195ecf93fb81562bcd6122149d"
      },
      {
        "id": "",
        "name": "b1817f23b4b0b09cd7db9e90eac166ddf0de9d22aaf69f17308da43854604d9e"
      },
      {
        "id": "",
        "name": "9f676511cb9b35e2916ebf79aec6b4aa6514f8bf640ea2fe786d16a7ed8dab7b"
      },
      {
        "id": "",
        "name": "93463142e354b05bbac20b9e9498ee5f8c9ea2488151ee6870189baab0b7e2ff"
      },
      {
        "id": "",
        "name": "922afb7de0159e7b435290868c51f33c59e0990ec964f77de9201534e4232117"
      },
      {
        "id": "",
        "name": "8fb5de2498e48338825253f9d165986403661003393278d93cb35f5f9a1549dc"
      },
      {
        "id": "",
        "name": "8e6176eaea919bae5b75000244474d8310a7b8d59806fca133d78f5343839d76"
      },
      {
        "id": "",
        "name": "856979042a3c1f61050cc08e8f11856dc714ec16969bd0fc562fd47c9e6c8e4c"
      },
      {
        "id": "",
        "name": "750baf928763a60343f8d48e45c4a4ca8da1243add410821b51484242571d089"
      },
      {
        "id": "",
        "name": "7f6f85e1ae4186edc9bf821943893b183a6a9252b0899d682c1899201dffc496"
      },
      {
        "id": "",
        "name": "73c099168755acbc793675a5e64ca719f909cd1943db5757af96b2c1c79ae6d8"
      },
      {
        "id": "",
        "name": "7225d5fde4daa4552daf67a0ac2f6d7ec0e768536c5377ee3e7beaa04603a6f5"
      },
      {
        "id": "",
        "name": "5d6075e33a168dfa44492dbec5462c6142399b708ec0d038e3e1869141e6b378"
      },
      {
        "id": "",
        "name": "5d45cc81a22e6ba596b12db4baec5b20ccbe9ce52f8258fa5690da0e5ef2a982"
      },
      {
        "id": "",
        "name": "5a441a59fe273161ff82cbe2a7fbddd21386481ad03cc1782b5b41b6b839c245"
      },
      {
        "id": "",
        "name": "4b35a3872589f44c43469cf73c54b525506f6cc894598d109c5f931923c6eba9"
      },
      {
        "id": "",
        "name": "05219c02d66daad246eab2abccc35384c34f17ce1daa2fee21cf0bfee88e31b2"
      }
    ],
    "malware": [
      {
        "id": "ed4cbf67-af05-4eb5-9a37-b51f6496b183",
        "name": "AMOS",
        "slug": "amos"
      },
      {
        "id": "9493fa87-b10b-4c45-a996-63cb66dac639",
        "name": "Atomic macOS",
        "slug": "atomic-macos"
      },
      {
        "id": "54a0b340-b33e-4644-8a5a-68eea8cca00d",
        "name": "StealC",
        "slug": "stealc"
      },
      {
        "id": "8c5873bd-8c1c-4e93-8886-13a7ef885db7",
        "name": "Rhadamanthys",
        "slug": "rhadamanthys"
      }
    ],
    "attack_patterns": [
      {
        "id": "ba7ea2d7-f4a7-4842-adf1-f6a068878d8e",
        "name": "T1444"
      },
      {
        "id": "fa3b8b48-d97c-4242-83a6-07d435a5a79e",
        "name": "T1041"
      }
    ]
  },
  "external_refs": [
    "https://go.recordedfuture.com/hubfs/reports/cta-2024-0617.pdf",
    "https://otx.alienvault.com/pulse/66741fdb1af81fa3ecb09bf9"
  ]
}