Anka Neferler Timi

Profile narrative

The threat actor known as Anka Neferler Timi also operates under the alias The Turkish Hacker Team. Open‑source reporting indicates that the group is based in France. The actor first came to public attention in December 2020 when it claimed responsibility for a cyber‑attack on the European Court of Human Rights. The group’s name translates to “The Phoenix Heroes Team” in Turkish, reflecting a nationalist motif. No further details about its size, structure, or internal hierarchy have been disclosed in publicly available sources.

The observed activity of Anka Neferler Timi has been limited to a single incident targeting a European judicial institution. In that incident the group disrupted the Court’s website for roughly sixteen hours following a ruling that ordered Turkey to release a detained opposition politician. The attackers posted on a newly created Twitter account stating they had taken the site offline and demanded an apology from the Court for the decision. The demand for an apology indicates that the operation was intended to protest the ruling and to pressure the institution to retract or reconsider its stance. No evidence has been presented linking the attack to financial gain, espionage, or the deployment of malware; the effect appears to have been purely disruptive. The group’s tactics, as described, consist of a denial‑of‑service‑style outage rather than data exfiltration or persistence.

The December 2020 attack on the European Court of Human Rights remains the sole publicly reported operation attributed to Anka Neferler Timi. No other campaigns, tooling, or malware families have been associated with the actor in open‑source reporting. Consequently, any assessment of broader targeting patterns, preferred initial access vectors, or affiliations with state or criminal entities cannot be made from the available information. The actor’s location in France and its use of a Turkish‑language name suggest a possible diaspora‑based motivation, but this observation rests solely on the naming convention and geographic detail provided. Until further activity is disclosed, the profile of Anka Neferler Timi is confined to the facts surrounding the December 2020 website disruption and the accompanying demand for an apology.

Incidents

Attributed incidents are available to members.