Alsancak Tim
Attribution profile
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
Alsancak Tim, also known as Alsancak Team or Alsancak Hacker Group, is a hacker collective that identifies itself as a nationalist Turkish group and uses the tagline "injustice, oppression and war with all our might" on its social media presence. The group is based in Turkey, according to available reporting. It promotes an anti‑oppression ideology online, although the specific motivations for any particular operation are not disclosed by the actors themselves.
In January 2015 the group compromised the majority of the Ghanaian government's websites, including the primary portal, and rendered them offline by displaying a message that read 'Hacked by Alsancak Tim'. On its Facebook page the group listed eleven Ghanaian domains it claimed to have hacked, and the defacement was accompanied by the group's branding. The deputy communications minister said experts were working to restore the websites by the end of the day and were investigating who was behind it. The incident was reported by BBC News on 21 January 2015. The attack followed earlier intrusions against Ghanaian institutions, such as the justice ministry's site during a 2012 dispute and simultaneous breaches of two private banks in the same year, as noted by contemporaneous reporting.
No public details have been released regarding the tools, malware families, or initial access vectors used by Alsancak Tim in this or any other operation, and no state sponsorship or criminal consortium affiliation has been established. The Ghanaian website defacement remains the most extensively documented activity attributed to the group, serving as a representative example of its capability to conduct disruptive actions against government‑facing online assets.
Incidents
Attributed incidents are available to members.
1 incident