APT73 Claims Targeting of Turkey’s TKGM

· Original article ↗

Summary

A claim attributed to apt73 says Turkey’s TKGM was targeted by ransomware. The monitoring post cites the actor’s leak site and says the claim is unconfirmed.

Key points

  • The post identifies Turkey’s land registry and cadastre agency, TKGM (tkgm[.]gov[.]tr), as the named target.
  • The ransomware claim is attributed to apt73 and linked to a page on the actor’s leak site.
  • The record was discovered and published on May 22, 2026, and is marked as monitored by ransomware.live.
  • The post says it cannot confirm the claim; it provides no independently verified evidence of compromise or impact.

Article Details

Victim
TKGM (Tapu ve Kadastro Genel Müdürlüğü)
Victim Domain
tkgm.gov.tr
Claim Date
2026-05-22
Encryption Status
Unknown; the source does not report whether data was encrypted.
Exfiltration Status
Unknown; the source does not confirm whether data was exfiltrated.
Ransom Demand
Unknown; no ransom demand is reported.
Leak Status
Unknown; the source reports a ransomware claim but does not confirm that data was published.

Threat Actors

Countries

Industries