Cyber Threat Actor: Ayyildiz Tim

AyyildizTim, also known as Ayyildiz Tim Hack Team, is a Turkish nationalist cyber group that has been identified in open‑source reporting as operating from Turkey. The group describes itself as patriotic, presenting its members as soldiers of the virtual world whose purpose is to counter anti‑Turkish messages and to conduct propaganda activities. This self‑characterization is the only publicly available statement regarding its internal ideology and goals. No further details about its organizational structure, size, or funding sources are provided in the referenced material.

The only concrete activity attributed to Ayyildiz Tim in the source material is the defacement of the website of North Mundham Primary School in Sussex, United Kingdom, which occurred on April 23 2017. During that incident the attackers replaced the site’s normal content with a plain white background, a red logo, and messages in both Turkish and English, including the note “HELLO ADMIN SYSTEM HACKED.” The alteration of a public‑facing website constitutes a defacement tactic, and no malware families, exploit kits, or specific initial‑access vectors are mentioned in the reporting. The group’s stated aim of stopping anti‑Turkish content and engaging in propaganda aligns with the observed defacement, which served to display their messaging on a compromised platform.

Attribution to Ayyildiz Tim is based on the article’s identification of the group as the presumed actor behind the Sussex school website hack, and the group’s location is noted as Turkey. No public evidence links the group to a state sponsor, a criminal consortium, or any broader alliance, and the reporting does not attribute financial gain, espionage, or other strategic motives to its actions. The North Mundham Primary School defacement remains the sole publicly reported operation associated with the group, illustrating its use of website defacement as a means to propagate its nationalist narrative. No additional campaigns or techniques are documented in the provided sources.