2D / 3D SANAL POS MAİL ORDER
2D / 3D SANAL POS MAİL ORDER is a threat actor group with an ideological motive, tracked by Brandefense. It targets the Government and Finance sectors.
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Oct 28, 2025
- Last seen
- Sep 7, 2026
- Record updated
Who They Target.
About 2D / 3D SANAL POS MAİL ORDER.
Financially-motivated Telegram threat actor **2D / 3D SANAL POS MAİL ORDER** (user_id ), tracked via the BranDefense/Thanos dark-web collection. Observed in 87 messages across 1 channels between 2025-10-28 and 2026-09-07. Assessed threat level: YÜKSEK (score 7). Primary activity: POS/card cash-out, database/PII leak trading, carding / stolen card data, operational coordination. 3 indicator(s) extracted. Most active channels: 2D / 3D SANAL POS MAİL ORDER. Language(s): en, tr, ja, zh. Assessed origin: Turkey (from language). Targeted sector(s): Government-And-Administrations, Finance. Goals: Cash out stolen cards via POS terminals; Sell leaked databases and PII; Trade stolen payment-card data. Identity is a Telegram channel brand: posts are published under the channel's own name and the operator(s) behind it are not resolved.
Last updated Sep 15, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.