Cyber Incident Victim: Armenian Ministry of Energy and Economy
Date:
Apr 2016
Location:
Armenia
Summary
A Turkish hacker group known as Turk Hack Team launched cyber attacks against Armenian government infrastructure, including the Ministry of Energy and Economy, in retaliation for clashes over the Nagorno-Karabakh conflict. The group claimed responsibility for disrupting access to multiple critical Armenian entities such as the National Bank and National Security Service through distributed denial-of-service (DDoS) attacks, aligning themselves with Azerbaijan in the territorial dispute. This offensive followed counter-cyber operations by Armenian hackers from the Monte Melkonian Cyber Army against Azerbaijani government systems, escalating digital hostilities amid physical border confrontations between the two nations.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 2 actors | Available to members | Available to members |
Description
On April 2-3, 2016, during heightened military clashes over the Nagorno-Karabakh region, the Turk Hack Team (THT) launched coordinated cyber attacks against Armenian government infrastructure in solidarity with Azerbaijan. THT, a Turkish hacker collective with prior history of high-impact DDoS campaigns—including against Vatican City websites—targeted multiple critical Armenian institutions. Their attack successfully disrupted access to the Armenian government portal, National Bank of Armenia, National Security Service, and the Ministry of Energy and Economy. THT publicly claimed responsibility via a Pastebin statement, declaring their actions a direct response to Armenia’s role in the border conflict and framing the cyber offensive as retaliation for Armenia’s "aggression." The group emphasized their technical success in "closing all access" to the targeted sites, though specific downtime durations or technical methods beyond DDoS were not disclosed in their announcement.
This incident occurred within a broader cycle of reciprocal cyber operations between nationalist hacker groups aligned with the conflict. One day prior to THT’s attacks, the Armenian-linked Monte Melkonian Cyber Army (MMCA) had disabled Azerbaijani government servers through defacements and data leaks—a tactic contrasting with THT’s focus on availability disruption. The cyber hostilities directly mirrored escalating ground combat that killed at least 30 soldiers, with both governments blaming each other for the violence. No explicit mitigation efforts or technical responses by Armenian authorities were documented in available reporting. THT’s statement framed the Ministry of Energy and Economy disruption as part of a strategic campaign against economic and administrative infrastructure, though no data theft or destruction at the ministry was explicitly cited. The attacks represented a visible escalation in hacktivist participation in the decades-old territorial dispute, with both groups leveraging cyber capabilities to amplify geopolitical tensions.