IN May 2023, an infostealer infected the Military Police Investigation Section of the Turkish-backed Syrian National Army in northern Syria, compromising sensitive information. The malware extracted passwords, cookies, and interrogation records, including active detainee files stored on the desktop without encryption or password protection.
Key findings include allegations of: 1) An espionage network providing intelligence to Kurdish forces, 2) A human-smuggling operation involving SNA soldiers, and 3) Conflicting versions of a detainee's statement, indicating possible manipulation of records. The report details the nature of the allegations using the interrogation records as evidence.