Motivation: Financial; Political / nation-state
Reported in connection with several high-profile breaches, including the 2016 Turkish National Police leak. Public sourcing is thinner than for major ransomware groups, so incident-specific evidence matters.
Targeting: government and private organizations. Confidence limited by source quality.
Attribution draws on public threat-intelligence reporting · Actor-claimed + sample. Primary source →
Check your exposure privately, or request a tailored exposure audit.