apt

Sea Turtle

active · last signal 19d agoAttribution: ModeratePlausible and partly corroborated — some gaps or single-source elements.

APT / State-sponsored

Teal KurmaMarbled DustCosmic WolfSILICONUNC1326

Attribution

Turkiye-aligned / Turkish-state-nexus espionage actor (assessed)

Origin

Turkey

First seen

2019

Last active

2025

Motivation

Espionage

Attribution confidence

medium

MENA targeting

Turkey, Iran, Egypt, Iraq, Cyprus, Greece, broader MENA

Sectors

Government/foreign ministries, military, intelligence, energy, telecom, ISPs

MITRE ATT&CK

G1041 ↗

Corpus activity · 6mo1 mention

AMJJAS

Why it mattersState-sponsored / APT actor, medium confidence, documented targeting Turkey, Iran, Egypt (Government/foreign ministries, military, intelligence sectors).

What's nextNo pipeline reports reference this actor yet — Radar mentions may still surface early signal.

Associated with

Related to

Void Manticore (Storm-0842)actorTechnique overlap
BianLianactorTechnique overlap
BrainCipheractorTechnique overlap
UNC1860actorTechnique overlap
Cyber Toufan (Al-Aqsa)actorTechnique overlap
PoloniumactorTechnique overlap
LynxactorTechnique overlap
APT33actorTechnique overlap
Rhysida

Indicators

No indicators linked yet

IOC extraction runs nightly against new reporting on this actor. Check back after tomorrow's corpus refresh.

Useful?

Suggested · co-occurring (unverified)

These entities are frequently mentioned together in source material; co-occurrence is not a verified relationship.

CVECVE-2026-20212co-mentioned in 1 item

MuddyWateractorTechnique overlap

Syrian Electronic ArmyactorTechnique overlap

RansomHouseactorTechnique overlap

KillSecactorTechnique overlap

SinobiactorTechnique overlap

DevmanactorTechnique overlap

UNC215actorTechnique overlap

WIRTEactorTechnique overlap

BahamutactorTechnique overlap

APT39 / ChaferactorTechnique overlap

NovaactorTechnique overlap

OilRig (APT34)actorTechnique overlap

Imperial Kitten (CURIUM)actorTechnique overlap

Scarred Manticore (Storm-0861)actorTechnique overlap

Charming Kitten / APT42actorTechnique overlap

Nemesis KittenactorTechnique overlap

Cl0pactorTechnique overlap

Tropic TrooperactorTechnique overlap

Fox KittenactorTechnique overlap

RansomHubactorTechnique overlap

HEXANE (Lyceum)actorTechnique overlap

SentinelOne WatchTower Intelligence-Driven Threat Hunting End of Year 2023reportORKL2024-02-15

The Human Factor 2023reportORKL2023-06-07

Uses

Archive via UtilitytechniqueATT&CK mapping
Trusted RelationshiptechniqueATT&CK mapping
Exploitation for Client ExecutiontechniqueATT&CK mapping
TooltechniqueATT&CK mapping
Exploit Public-Facing ApplicationtechniqueATT&CK mapping
DNS ServertechniqueATT&CK mapping

+21 more relationships — see the relationships browser.

Suggested · co-occurring (unverified)

These entities are frequently mentioned together in source material; co-occurrence is not a verified relationship.

CVECVE-2026-20212co-mentioned in 1 item