🛡️ THREAT INTELLIGENCE ALERT 🛡️
The domain
blacksystem.online hosts the Kuzey Sorgu Paneli (Kuzey Güvence) — a closed Turkish Crime-as-a-Service panel that sells illegal queries on leaked e-Devlet/MERNIS government databases.
What it delivers:
• Turkish National ID (TC Kimlik) full citizen data
• Phone number (GSM) owner information
• Residential address, family tree, property records (Tapu) and more
How it works:
• Exclusive access via private Telegram mandatory VPN
• Pricing: ~700 ₺ weekly | ~1,200 ₺ monthly | Higher for resellers (bayilik)
• Promoted in closed Facebook groups and Telegram channels
Target Users: Turkish cybercriminals specialized in identity fraud, SIM swapping, banking scams, and social engineering.
Owners/Operators:
• Extreme OPSEC: real identities not identified in open sources
• WHOIS privacy protected
• Small team that rapidly migrates domains when blocked
Current Status (March 26, 2026):
Active and officially listed by USOM (Turkish CERT) as Financial Phishing.
These panels directly fuel the identity theft and financial fraud ecosystem in Turkey. Block the domain and associated Telegram in your environments!
#Cybersecurity #ThreatIntelligence #OSINT #Cybercrime #Phishing #DataBreach #InfoSec #IdentityTheft #CyberThreat