- Category
- Hacktivist · Political or nationalist, often disruption and leaks.
- Origin
- Türkiye(high confidence)
- Motivation
- Denial of service; Hacktivists-Nationalists
- Sources
- 5 sources carry it
- Identifier
- GINC-APT-0378 · aslan-neferler-tim
What it is
Turkish nationalist hacktivist group that has been active for roughly one year. According to Domaintools, the group’s site has been registered since December 2015, with an active Twitter account since January 2016. The group carries out distributed denial-of-service (DDoS) attacks and defacements against the sites of news organizations and governments perceived to be critical of Turkey’s policies or leadership, and purports to act in defense of Islam
Names
The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.
- Other names
- Lion Soldiers Team, Phantom Turk
Attribution
Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.
Western sources
- MISP Galaxy (CFR tagging)Türkiye
- ThreatActor.info (Malpedia et al.)Türkiye
Targets
- Sectors
- Government, Administration, News - Media
Sources
- Malpedia malpedia.caad.fkie.fraunhofer.de