~Baron Alım Satım Ticaret~
~Baron Alım Satım Ticaret~ is a threat actor group with an ideological motive, tracked by Brandefense. It targets 5 sectors, including Government and Manufacturing.
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Mar 26, 2026
- Last seen
- Aug 20, 2026
- Record updated
Who They Target.
About ~Baron Alım Satım Ticaret~.
Financially-motivated Telegram threat actor **~Baron Alım Satım Ticaret~** (user_id ), tracked via the BranDefense/Thanos dark-web collection. Observed in 176 messages across 1 channels between 2026-03-26 and 2026-08-20. Assessed threat level: YÜKSEK (score 7). Primary activity: virtual number / account provisioning, bank account & IBAN selling/renting (money-mule), database/PII leak trading, carding / stolen card data. 7 indicator(s) extracted. Most active channels: ~Baron Alım Satım Ticaret~. Language(s): tr, zh. Assessed origin: Turkey (from language). Targeted sector(s): Government-And-Administrations, Finance, Retail Trade, Manufacturing, Transaction & Payment Processing Services, Casinos & Gaming. Targeted country/countries: Turkey. Targeted organisation(s): Paycell. Goals: Sell leaked databases and PII; Provision virtual numbers and accounts for fraud; Trade stolen payment-card data; Sell/rent bank accounts and IBANs for money laundering. Identity is a Telegram channel brand: posts are published under the channel's own name and the operator(s) behind it are not resolved.
Last updated Sep 15, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.