Skip to content
brandefense.io
Request A Demo
CybercrimeFinancialAdvanced sophistication

WInQ7wk9sA3aKAc

WInQ7wk9sA3aKAc is a cybercrime syndicate with a financial motive, tracked by Brandefense. It targets 8 sectors, including Manufacturing and Finance, in Türkiye.

Also known as
  • Solomon's Shamir
Request IOC feedRequest ATT&CK export
Techniques
0
Exploited CVEs
No CVE data
First seen
Jul 30, 2026
Last seen
Jul 31, 2026
Record updated

Who They Target.

Sectors · 8
Countries · 1

About WInQ7wk9sA3aKAc.

An unattributed threat actor operating under the persona 'Solomon's shamir'. The actor publicly announced the compromise of Baltas Online, claiming 47 days of persistent root-level access and full data exfiltration. They demonstrate above-average operational security, using purpose-built single-use forum accounts, randomly generated handles, privacy-preserving communication channels (Session, Proton), and a victim-derived email alias.

Last updated Aug 3, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.