- Category
- Hacktivist · Political or nationalist, often disruption and leaks.
- Origin
- Türkiye(high confidence)
- Motivation
- Denial of service; Hacktivists-Nationalists
- Sources
- 5 sources carry it
- Identifier
- GINC-APT-0381 · ayy-ld-z-tim
TürkiyeWhat it is
Ayyıldız (Crescent and Star) Tim is a nationalist hacking group founded in 2002. It performs defacements and DDoS attacks against the websites of governments that it considers to be repressing Muslim minorities or engaged in Islamophobic policies.
Names
The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.
- CrowdStrike
- THUNDERBOLT JACKAL
- Other names
- Ayyıldız Tim, Crescent and Star
Attribution
Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.
Western sources
- MISP Galaxy (CFR tagging)Türkiye
- ThreatActor.info (Malpedia et al.)Türkiye
Targets
- Sectors
- Government, Administration
Tools
The tools and malware families the sources tie to it.
- Hacking Team UEFI Rootkit
Sources
- Malpedia malpedia.caad.fkie.fraunhofer.de