APT 90

APT 90 is a recent Telegram-visible group presenting itself as a hacker group and collaborating with Meta Core LEGION, BLACKHATSECT0R, DXQRTXX and BD Anonymous Team. Public content positions APT90 as a web-pentest or web-intrusion execution partner for Yadro/Meta Core LEGION and includes a large claim against the Fédération Française d’Équitation involving S3 buckets, Drupal/Odoo databases and exported contact data.

This profile is written conservatively. Publicly visible posts, metadata, archives and claim material are sufficient to document actor posture, aliases, public messaging, relationship edges and likely role. They are not sufficient to validate every claimed compromise, exfiltration, exploit chain or real-world identity.

The actor should be handled as medium confidence. Claims of compromise must remain claim-level unless corroborated by victim telemetry, independent reporting, leaked-material validation, samples or infrastructure correlation.