The zip attachment contains an exe file: the malware itself. Stolen data is exfiltrated via SMTP.
The SDF are preparing for an invasion by pro-Turkey militias in Kurdistan. Kurdish forces send fighters and assets, even heavy ones, to Ain Issa. There is fear of a maxi infiltration attempt by TAF allied groups to take the M4
The SDF fear a massive infiltration attempt by pro-Turkey militias in Kurdistan in Sayda, near Ain Issa. Following this, the Kurdish forces in the last few hours have sent reinforcements and assets to the quadrant. These include several heavy weapons that have been placed within firing range from possible enemy entry points. In recent days, however, there had already been a similar attempt in Jadidah. This, unlike in the past, had been organized with cover fire and minor attacks in the Syrian province itself to try to distract the defenses. The raid, however, had been thwarted and the para-military groups close to the TAF had to withdraw. Their goal remains to take control of the M4. This in order to be able to quickly transfer men and vehicles to Kurdistan, inhibiting the same capacity to the SDF.