Attribution
Cyber-espionage group with a heavy focus on Turkish and Syrian targets; some reporting suggests possible Turkish-state alignment (assessed, not confirmed)
Origin
Unknown (Turkey-nexus suspected)
Attribution confidence
medium
MENA targeting
Syria, Turkey (Kurdish-population-focused)
Sectors
Individuals/general users via watering holes, ISP-level traffic
Why it mattersState-sponsored / APT actor, medium confidence, documented targeting Syria, Turkey (Kurdish-population-focused) (Individuals/general users via watering holes, ISP-level traffic sectors).
What's nextNo pipeline reports reference this actor yet — Radar mentions may still surface early signal.
No open hunts or recent alerts tracked against this actor right now.