Hidden in the system logs was a file named whitelist_shell.php . Forensic linguists we spoke to believe this was a backdoor left by a system administrator who had been purged in the pre-coup arrests. The WLS allowed the uploader to bypass the firewall entirely. If true, this was an inside job dressed as an external hack.
Decrypting the second layer of the 2016 Police IM logs. turkish police data dump 2016 exclusive