Saladin Cyber

Saladin Cyber, also identified as Saladin Cyber Alliance, is an evidence-limited cyber-group identity currently tracked through a private or invite-based Telegram resource. Analyst collection identifies Coreveil and Whitwhy Dx as administrators of the group. The present open-source sweep did not recover an independently attributable victim-side artifact, technical report, malware sample, defacement archive entry, infrastructure record or public campaign that could be confidently assigned to this exact Saladin Cyber identity. The dossier therefore preserves the alliance label, Telegram pivot and administrator relationship while deliberately withholding unsupported origin, motivation, victimology and TTP assignments.