Skip to content
Threat actors by targeted country

Threat Actors Targeting Türkiye.

Brandefense tracks 178 threat actors known to target Türkiye. The most documented are APT28, Lazarus Group and Sandworm. The sectors they target most are Government, Manufacturing and Technology.

48 of 54 published profiles shown

Molerats
aka Operation Molerats · Gaza Cybergang
Nation-state APTEspionage

Molerats is a nation-state APT group with an espionage motive.

27TTPs
1exploited
25malware
AdvancedProfile →
Putter PandaChina
aka 4HCrew · APT2 · G0024 +6
Nation-state APTEspionage

Putter Panda is a China-attributed nation-state APT group with an espionage motive.

18TTPs
10exploited
23malware
AdvancedProfile →
Ajax Security TeamIran
aka Operation Woolen-Goldfish · AjaxTM · Rocket Kitten +4
Nation-state APTEspionage

Ajax Security Team is an Iran-attributed nation-state APT group with an espionage motive.

18TTPs
9exploited
10malware
AdvancedProfile →
PittyTigerChina
aka G0011 · PITTY PANDA · Temp.Pittytiger +2
Nation-state APTEspionage

PittyTiger is a China-attributed nation-state APT group with an espionage motive.

19TTPs
5exploited
31malware
AdvancedProfile →
Orangeworm
aka G0071
Nation-state APTEspionage

Orangeworm is a nation-state APT group with an espionage motive.

23TTPs
–No CVE data
8malware
AdvancedProfile →
Equation GroupUnited States
aka APT60 · G0020 · EQGRP +4
Nation-state APTEspionage

Equation Group is an United States-attributed nation-state APT group with an espionage motive.

4TTPs
18exploited
27malware
StrategicProfile →
AxiomChina
aka Group 72 · G0001 · Operation “SMN”
Nation-state APTEspionage

Axiom is a China-attributed nation-state APT group with an espionage motive.

17TTPs
5exploited
21malware
AdvancedProfile →
NEODYMIUMTürkiye
aka G0055
Nation-state APTEspionage

NEODYMIUM is a Türkiye-attributed nation-state APT group with an espionage motive. It targets the Government, and Defense and Aerospace sectors in Türkiye.

8TTPs
11exploited
1malware
AdvancedProfile →
SuckflyChina
aka APT22 · BRONZE OLIVE · Group 46 +3
Nation-state APTEspionage

Suckfly is a China-attributed nation-state APT group with an espionage motive.

5TTPs
7exploited
21malware
AdvancedProfile →
Volatile CedarLebanon
aka DeftTorero · Lebanese Cedar · Amethyst Rain +1
Nation-state APTEspionage

Volatile Cedar is a Lebanon-attributed nation-state APT group with an espionage motive.

8TTPs
3exploited
11malware
AdvancedProfile →
CopyKittensIran
aka Slayer Kitten · G0052 · Operation “Wilted Tulip”
Nation-state APTEspionage

CopyKittens is an Iran-attributed nation-state APT group with an espionage motive.

9TTPs
1exploited
16malware
AdvancedProfile →
GelsemiumChina
aka Operation “TooHash” · Operation “NightScout”
Nation-state APTEspionage

Gelsemium is a China-attributed nation-state APT group with an espionage motive.

6TTPs
3exploited
17malware
AdvancedProfile →
CleaverIran
aka Threat Group 2889 · TG-2889 · Cutting Kitten +2
CybercrimeEspionage

Cleaver is an Iran-attributed cybercrime syndicate with an espionage motive.

5TTPs
4exploited
23malware
AdvancedProfile →
UNC7017
Nation-state APTEspionage

UNC7017 is a nation-state APT group with an espionage motive.

7TTPs
–No CVE data
4malware
AdvancedProfile →
Earth KrahangChina
Nation-state APTEspionage

Earth Krahang is a China-attributed nation-state APT group with an espionage motive.

4TTPs
2exploited
10malware
AdvancedProfile →
BlackOasis
aka G0063
Nation-state APTEspionage

BlackOasis is a nation-state APT group with an espionage motive.

1TTPs
5exploited
2malware
AdvancedProfile →
Mr.XycanKing
Nation-state APTEspionage

Mr.XycanKing is a nation-state APT group with an espionage motive.

3TTPs
–No CVE data
0malware
MinimalProfile →
WorokChina
Nation-state APTEspionage

Worok is a China-attributed nation-state APT group with an espionage motive.

2TTPs
–No CVE data
10malware
Not ratedProfile →
ChuckXzn_101
Nation-state APTEspionage

ChuckXzn_101 is a nation-state APT group with an espionage motive.

2TTPs
–No CVE data
0malware
MinimalProfile →
Antonkill
Nation-state APTEspionage

Antonkill is a nation-state APT group with an espionage motive.

2TTPs
–No CVE data
0malware
MinimalProfile →
GoldenJackal
Nation-state APTEspionage

GoldenJackal is a nation-state APT group with an espionage motive. It targets the Government and Diplomacy sectors in 6 countries, including Türkiye and Pakistan.

1TTPs
–No CVE data
15malware
AdvancedProfile →
TeamSpy CrewRussia
aka SIG39 · Iron Lyric · Team Bear +1
Nation-state APTEspionage

TeamSpy Crew is a Russia-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
2malware
Not ratedProfile →
CalypsoChina
aka Bronze Medley
Nation-state APTEspionage

Calypso is a China-attributed nation-state APT group with an espionage motive. It targets the Government sector in 11 countries, including India and Brazil.

0TTPs
–No CVE data
19malware
Not ratedProfile →
Icefog, Dagger PandaChina
aka Icefog · Dagger Panda · ATK 23 +1
Nation-state APTEspionage

Icefog, Dagger Panda is a China-attributed nation-state APT group with an espionage motive.

0TTPs
–No CVE data
4malware
Not ratedProfile →
← Previous page
On the Brandefense platform

IOC Feeds, YARA Rules And ATT&CK Navigator Exports For Every Actor.

Plus alerts when an actor in your sector starts exploiting a product you run, and detection rules you can load into your own tools.

Request A Demo

FAQ

Common Questions.