Cyber Incident Victim: Embassy of Armenia in Sweden
Date:
Jan 2016
Location:
Armenia
Summary
Azerbaijani hackers from the Anti-Armenia Team conducted a cyber attack targeting Armenian diplomatic and government websites, including the Permanent Mission to NATO, in retaliation against prior actions by the Armenian Monte Melkonian Cyber Army. The attackers defaced the sites, replacing content with propaganda messages and videos glorifying Azerbaijan’s military capabilities, aiming to demonstrate dominance amid the ongoing Nagorno-Karabakh conflict. This incident highlighted the intensifying cyber warfare between the two nations, which lack diplomatic relations and remain technically at war due to the territorial dispute. The defacements impacted multiple official platforms across several international organizations, underscoring the broader geopolitical tensions fueling such digital confrontations.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On or around January 18, 2016, Azerbaijani hackers operating under the name "Anti-Armenia Team" executed a coordinated cyber attack targeting Armenian diplomatic and international mission websites. The attack compromised the official websites of Armenia's Permanent Mission to NATO, Permanent Mission to the Organization for Security and Co-operation in Europe (OSCE), and Permanent Mission to the United Nations. Additionally, embassy websites representing Armenia in approximately 40 countries were defaced. The hackers replaced legitimate website content with a defacement page displaying text and video messages emphasizing Azerbaijan's military capabilities, including footage of Azerbaijan's Prime Minister addressing the nation. This action was publicly claimed as retaliation against Armenian hacking group Monte Melkonian Cyber Army (MMCA), which had previously leaked sensitive data from Azerbaijani government servers in December 2015.
The incident occurred within the context of ongoing geopolitical tensions between Azerbaijan and Armenia stemming from the unresolved Nagorno-Karabakh conflict, with both nations maintaining no formal diplomatic relations. The defacements remained publicly visible for an unspecified duration, demonstrating operational access to critical Armenian government web assets. Hackers explicitly referenced their July 2014 attack on the Armenian presidential website during communications with media, asserting their continued dominance in this cyber conflict. No technical details regarding intrusion methods or specific mitigation actions by Armenian authorities were disclosed in available reporting. The attacks highlighted the persistent vulnerability of governmental digital assets to politically motivated threat actors within regional conflicts, with compromised sites serving international diplomatic functions.