Yusuf Software
Yusuf Software is a Türkiye-attributed threat actor group, tracked by Brandefense.
- Origin
- Türkiye
- Techniques
- 0
- Exploited CVEs
- No CVE data
- Record updated
About Yusuf Software.
YusufSoftware (aka Deccal1337) The threat actor, known by the aliases YusufSoftware and Deccal1337, has emerged as a significant adversary, specifically targeting government agencies. They have publicly disclosed identified vulnerabilities via Telegram channels. Additionally, they are working to establish various services, such as query panels, to monetize these vulnerabilities. It has been observed that the actor and their group regularly conduct vulnerability scans targeting Turkish government institutions. The vulnerabilities identified are then exploited for financial gain. The technical skills of the actor are not seen as highly advanced; rather, it is believed they rely on automated tools to perform scans and detect security weaknesses.
Last updated May 14, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.