---
id: 6309
title: "SolarMarker: Hunt Insights and Findings"
source_domain: hunt.io
source_url: "https://hunt.io/blog/solarmarker-hunt-insight-and-findings"
published_at: "2024-05-30T00:00:00Z"
tags: ["phishing", "infostealer", "ssh-keys", "m247", "malware-infrastructure", "solarmarker"]
phying_url: "https://phying.com/item/6309"
lang: en
---

# SolarMarker: Hunt Insights and Findings

## Summary

Following Recorded Future's report, Hunt identified 20 SolarMarker tier-1 servers on the M247 network, plus SSH keys reused across 100+ hosts and domains spoofing Interac and a payment provider.

## Intelligence Metadata

- **Sources:** hunt.io
- **Published:** 2024-05-30T00:00:00Z
- **Original:** https://hunt.io/blog/solarmarker-hunt-insight-and-findings
- **Phying News:** https://phying.com/item/6309