KINWILDER

Markopolo

No sourced public emblem in this profile.

reference profile · reported nexus: Unknown (not nationality)

Markopolo is a threat actor known for running scams targeting cryptocurrency users through a fake app called Vortax. They use social media and a dedicated blog to legitimize their malicious activities. Markopolo has been linked to a credential-harvesting operation and is agile in pivoting to new scams when detected. The actor leverages shared hosting and C2 infrastructure for their malicious builds.

Source-reported aliases: . Associations do not prove equivalence.

Target geography

Catalog-listed countries (associations, not attack counts): No country-level metadata

No bound claim-post feed for this label.

Historical casebook

No dated record curated yet; absence does not establish inactivity.

Planned Kinwilder coverage

Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.

No assigned review window.

References

Pinned source catalog

https://www.darkreading.com/remote-workforce/vortax-meeting-software-branding-spreads-infostealers

https://www.recordedfuture.com/the-travels-of-markopolo-self-proclaimed-meeting-software-vortax-spreads-infostealers

Submission and profile-update guide · Publisher API

Editorial standard · root@kinwilder.com · RSS · Outpost