CLASSIFICATION: Unclassified / Open Source

Executive Summary

Cyber Warrior Team (also known as Akıncılar, “Raiders”) is a long-standing Turkish hacktivist banner with a hierarchical, quasi-military organizational self-image, publicly active since the late 1990s/early 2000s. Independent research places its founding lineage as the “illegal-port” group (1999) later restructured as Cyber Warrior, articulating a moralist–nationalist mission and proximity to state/security narratives; at one point, HP’s 2015 Cyber Risk Report categorized Akıncılar as state-sponsored based on publicly reported interactions with Turkish authorities (commendations for anti-RedHack activity, etc.).

Operationally, Akıncılar’s public footprint centers on high-salience defacements and symbolic campaigns (e.g., Srebrenica-linked protest hack of a Serbian government site in 2021; Times of Israel defacement in 2017), with episodic surges aligned to political flashpoints. Claims of very large multi-country defacement runs exist in community and self-published channels but are weakly corroborated. Overall confidence in the group’s defacement tradecraft is medium–high; confidence in claimed campaign scales is low–medium pending independent logs or Zone-H cross-checks.