The message gz attachment contains an exe file: the malware itself. Stolen data is exfiltrated via FTP.
Turkey sends yet another convoy of reinforcements to Zawiya. It is the third in a few days. Furthermore, the allied militias continue to attack Ai Issa. It is confirmed that Ankara is aiming for Kurdistan via the M4
Turkey sends more military reinforcements south of Idlib. In the past few hours, a new convoy of 15 armored vehicles and equipment entered the Syrian province from Kafr Loosin and headed for Zawiya. It appears, according to local sources, that there is material destined for observation points in the area. On December 25 another had arrived, made up of 40 vehicles, while on the 21st one of 30. This, however, also carried artillery pieces and ammunition. All headed to the same place. In the meantime, attacks and attempts to infiltrate the Ain Issa quadrant continue (the latest ones occurred in Jahbal and Misherfah). This confirms that Ankara is trying to seal the M4 and that it is planning a full-scale offensive towards Kurdistan via the highway.
Meanwhile, the Syrian army (SAA) maintains pressure on Idlib. The goal remains to conquer Barah, although for now the attacks are mainly from a distance
Meanwhile, the Syrian army (SAA) continues to target militia positions in Zawiya, despite the presence of Turkish troops in the area. Objective: to conquer Barah. The latest attacks involved Kansafra, Feteirah and Fleifel. In parallel, there was intense Russian drone activity in Idlib, Hama and Latakia. At the moment, however, the situation on the ground remains stalled. Both the SAA and the rebels, in fact, hit each other from a distance and there have been few cases on both sides of attempts to infiltrate enemy territory, all foiled. The latest occurred north of Latakia and saw Hayat Tahrir al-Sham (HTS) blocking Damascus soldiers at Jabal Turkman.