GINC-APT-0358 · Targeted, sponsor unknown

TurkHackTeam

Also Turk Hack Team.

Category: Targeted, sponsor unknown · Targeted intrusions with no sponsor attributed.
Origin: Türkiye(high confidence)
Motivation: Hacktivists-Nationalists
Sources: 6 sources carry it
Identifier: GINC-APT-0358 · turkhackteam

What it is

Founded in 2004, Turkhackteam is one of Turkey’s oldest and most high-profile hacking collectives. According to a list compiled on Turkhackteam’s forum, the group has carried out almost 30 highly publicized hacking campaigns targeting foreign government and commercial websites, including websites of international corporations.

Names

The names each vendor, agency and source gives it. Naming differs by who tracks the actor, so one group carries many.

Other names: Turk Hack Team

Attribution

Each attribution is a claim: who makes it, and to whom. Western and Eastern sources are kept apart, as they often disagree.

Western sources

MISP Galaxy (CFR tagging)Türkiye
ThreatActor.info (Malpedia et al.)Türkiye

Tools

The tools and malware families the sources tie to it.

Hacking Team UEFI Rootkit

Sources

Malpedia malpedia.caad.fkie.fraunhofer.de