Infostealer Malware Targets Turkish-Backed Syrian Military Police Unit in Northern Syria

In May 2023, an infostealer malware infected a computer belonging to the Military Police Investigation Section in Suluk, northern Syria, a unit of the Turkish-backed Syrian National Army (SNA). The malware exfiltrated saved passwords, cookies, and an active Telegram session. A file-grabber module was also deployed as part of the attack, targeting sensitive data from the compromised system. The incident involved a government-affiliated military police unit operating in a conflict zone. No specific malware family, CVE IDs, or additional technical indicators were disclosed in the report.