Cyber Incident Victim: Embassy of Uzbekistan in Kuwait
Date:
May 2015
Location:
Kuwait
Summary
The official website of the Uzbekistan Embassy in Kuwait was compromised by a Syrian hacker known as Dr.SHA6H, who operates under the alias Free Syrian Hacker. The attacker defaced the embassy's site with a protest message and a YouTube video condemning global inaction toward the Syrian conflict, demanding international efforts to restore peace. The hacker claimed the breach was motivated by opposition to ongoing violence in Syria, emphasizing indiscriminate targeting of websites to amplify his message. The incident mirrored previous attacks attributed to the same actor, including a takedown of UNESCO Sweden's domain. The embassy's website was subsequently restored to normal operation.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On May 24, 2015, the official website of the Embassy of Uzbekistan in Kuwait (http://www.uzbekembassy.gov.kw) was compromised by a Syrian hacker operating under the alias Dr.SHA6H, also known as Free Syrian Hacker. The attacker replaced the website's content with a defacement page containing a political message condemning global inaction regarding the Syrian conflict, specifically referencing "four years of massacres" in Syria. The defacement included an embedded YouTube video reinforcing this message and publicly criticized world governments for failing to intervene in the Syrian crisis. Evidence of the hack was documented through a mirror hosted on Zone-H (ID 24354971), confirming unauthorized access to the embassy's web infrastructure. The hacker explicitly stated his motivation was unrelated to Uzbekistan, emphasizing he targeted any available platform to amplify his message about Syria. No data theft, malware deployment, or secondary system compromises were reported in connection with the incident.
Dr.SHA6H, identified as a high-profile Syrian activist hacker, had previously conducted similar attacks against government-affiliated websites, including a documented breach of UNESCO Sweden's official domain. During correspondence with media outlet HackRead, the hacker reiterated his singular focus on drawing attention to Syria's humanitarian situation rather than targeting specific nations. The Uzbek Embassy's technical team restored normal website operations before the publication of HackRead's report, indicating a containment response limited to removing defaced content and restoring original functionality. The incident caused temporary disruption to the embassy's online presence but did not result in reported collateral damage, secondary breaches, or long-term service interruptions. Attack methodology details beyond website defacement remained unspecified in available records.