The message rar attachment contains an executable file: the malware itself. Stolen data is exfiltrated with smtp.
Turkey strengthens defenses south of Idlib. TAF movements in Zawiya, targeted by the SAA with a remote offensive. Ankara fears that the allied militias will be put in difficulty and a surprise offensive
There is a strange mobilization among Turkish forces south of Idlib, culminating in a solo TAF patrol on the M4 from al-Tarnabah to Ain al-Hour. In addition, there was an intense presence of drones over the skies of the Syrian province. The sudden movements coincided with a violent remote offensive that the Damascus army (SAA) launched with artillery and missiles on Zawiya. According to local sources, Ankara fears that the defenses of Hayat Tahrir al-Sham (HTS) and other allied militias could be in trouble and that the SAA may take advantage of this to launch a ground invasion. Especially after an important number of assets have been sent to the quadrant in the last two months, ready to move as soon as the opportunity arises.