Monte Melkonian Cyber Army
Attribution profile
- Type
- Activist
- Location
- Armenia
- Known incidents
- 51 incidents
- Sources
- 6 sources
- First seen
- 2014-08-24
- Last seen
- 2016-09-25
- Updated
- 2026-10-17 09:39
- Aliases
- 2 aliases
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
Monte Melkonian Cyber Army (MMCA), also known as the Monte Melkonian Cyber Army, is an Armenian hacker group that has conducted cyber operations against Azerbaijani government, military, police, financial and diplomatic targets. Their activities include website defacements, distributed denial‑of‑service attacks, and the exfiltration and public release of personal data such as military officer records, banking customer details, and identity documents. The group states that its actions are retaliatory responses linked to Armenian independence commemorations and the ongoing Nagorno‑Karabakh conflict, aiming to protest Azerbaijani actions and assert Armenian positions. Observed tactics involve using DDoS to disrupt online services, exploiting vulnerabilities to gain access to servers, and then leaking or defacing the compromised assets; no specific malware families are mentioned in the sources. MMCA operates as a hacktivist collective with no publicly asserted state sponsorship or criminal‑consortium ties. Representative operations include the September 2016 breach of Azerbaijani banking and military systems that yielded data on roughly 1,200 officers and 10,000 bank customers accompanied by embassy defacements in Bulgaria, the Netherlands and Qatar; the January 2016 DDoS campaign that shut down Azerbaijani e‑government, tax and state‑body portals and leaked login credentials of thousands of users; and the July 2015 leak of identity cards and passports of approximately 5,650 Azerbaijani citizens from the customs website.
Incidents
Attributed incidents are available to members.
51 incidentsSources
Sources available to members: 6 sources.