aLem
Attribution profile
- Type
- Activist
- Location
- Turkey
- Known incidents
- 6 incidents
- Sources
- 4 sources
- First seen
- 2014-05-26
- Last seen
- 2016-07-01
- Updated
- 2026-10-17 02:30
- Aliases
- 1 alias
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
aLem is a Turkish hacker active since at least 2007, known for website defacements and associated with the Turk Hack Team. The actor has targeted U.S. government entities in Arizona, including the state legislature, house of representatives, governor’s office, and department of homeland security sites, replacing homepages with anti‑U.S. messages and logos of the Turkish football club Eskişehirspor. No malware families, specific initial access vectors, or tooling details are described in the available sources beyond the ability to bypass security controls and upload a defacement page. The incidents are characterized as disruptive defacements rather than financially motivated or espionage‑driven operations, and no public attribution to a state sponsor has been made. Notable operations include the July 2016 defacement of Arizona state websites and the June 2014 defacement of the Arizona governor’s website.
Incidents
Attributed incidents are available to members.
6 incidentsSources
Sources available to members: 4 sources.