Sea TurtleThreat actor
- cosmic wolf
- marbled dust
- teal kurma
- unc1326
This blog post discusses the technical details of a state-sponsored attack manipulating DNS systems. While this incident is limited to targeting primarily national security organizations in the Middle East and North Africa, and we do not want to overstate the consequences of this specific campaign, we are concerned that the success of this operation will lead to actors more broadly attacking the…From MISP Galaxy
Last reported 4 months ago, by Sekoia.io1 report
Suspected originTürkiyeMISP Galaxy
Targets countriesGermanyMISP Galaxy
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
SilentSelfie: Major Campaign Against Kurdish Websites“…cal elements or TTPs allowing us to link this operation to any open-source documented Turkey-nexus intrusion set such as StrongPity or Sea Turtle.”
Indicators in its reports
named in the reports above- obfuscator[.]ioin 1 report
- ronahi[.]netin 1 report
- ronahi[.]videoin 1 report
- lekolin[.]orgin 1 report
- ciwanensoresger[.]comin 1 report
- hawarnews[.]comin 1 report
- hxxps://rojnews[.]news/ku/wp-content/mobile.htmlin 1 report
- rojnews[.]newsin 1 report
- hxxps://targetplatform[.]net/mobile.htmlin 1 report
- targetplatform[.]netin 1 report
- webmail.onlinearuba[.]netin 1 report
- 23.95.14[.]63in 1 report
- hxxp://170.75.161[.]102/asd.jsin 1 report
- 170.75.161[.]102in 1 report
- 24.246.223[.]228in 1 report
- orkesfm[.]comin 1 report
- yra-ufm[.]comin 1 report
- zindi24[.]comin 1 report
- star-fm[.]netin 1 report
- ypjrojava[.]netin 1 report
Copy these 20 indicators · defanged
Thanks — we review every report.