NexusQassamy

Profile narrative

NexusQassamy is a hacktivist group that operates under the alias NexusQassamy and is identified as Turkish‑language.
The group’s location is indicated as Turkey in the available reporting.
It maintains a presence on the Telegram platform where it posts statements and claims responsibility for its operations.
On Telegram the group has previously shared content about the rise of Islam and the implementation of Sharia law.
These postings illustrate its ideological orientation and serve as a channel for disseminating its messages.

NexusQassamy has targeted Unidas, a Brazilian mobility firm that is integrated with Brookfield, in two separate incidents.
The attacks compromised the company’s television communication system, affecting more than two hundred and fifty devices that included televisions, Internet of Things equipment and servers.
On the compromised screens the group displayed a political message accusing Israel of genocide in Gaza, accompanied by images of injured civilians and a label that called the Israeli prime minister a baby killer.
The display also included the group’s signature and a call for global awareness of the alleged atrocities.
Responsibility for the intrusions was claimed through the group’s Telegram channel, where it had previously posted statements about the rise of Islam and Sharia.
An anonymous source within Unidas reported that the company lacked a dedicated security team and leadership support, leaving it unable to defend against or respond to the intrusions.

The April 2025 and November 2025 incursions against Unidas represent the group’s most publicly documented operations to date.
Both incidents are described as the second known attack targeting that specific area of the victim’s digital infrastructure, indicating a repeated focus on the firm’s media‑display systems.
The primary objective demonstrated in these actions appears to be political, aiming to draw attention to the conflict in Gaza and to criticize Israeli leadership.
No evidence of financial gain, espionage or state sponsorship has been presented in the reporting concerning NexusQassamy.
The group’s affiliation remains limited to its self‑identified Turkish‑language hacktivist character, with no publicly established links to a state apparatus or criminal consortium.
As a result, NexusQassamy is understood as a belief‑driven actor that leverages simple display‑hijacking tactics to propagate its message through compromised consumer‑facing devices.

Incidents

Attributed incidents are available to members.