Cyber Incident Victim: Azerbaijan
Timeline
Summary
A group of Armenian hackers going with the handle of Monte Melkonian Cyber Army (MMCA) claim to have defaced several Azerbaijani websites and to have executed a DDoS attack against Azerbaijani targets reaching 300 Gbps.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 2 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
Azerbaijan's government and critical infrastructure websites were hit by a cyber attack on August 24th, 2014, in what is believed to be the country's first major cyber attack. The Monte Melkonian Cyber Army (MMCA), a group of hackers from Armenia, claimed responsibility for the attack, which used techniques such as message manipulation and external denial of service to disrupt the websites.

The attack began at around 10am local time, when users attempting to access government and critical infrastructure websites were met with messages in Azerbaijani and English warning them that their personal data had been compromised. The messages also contained a threat from MMCA, claiming responsibility for the attack and promising further action unless demands were met.
The attack caused widespread disruption across the country, with many users reporting difficulty accessing government websites such as those of the Ministry of Internal Affairs, the State Customs Committee, and the Tax Authority. The attack also affected critical infrastructure websites, including those belonging to the national power grid operator and the state-owned oil company.
The Azerbaijani authorities quickly condemned the attack, promising an investigation into the incident. However, MMCA claimed responsibility for the attack in a statement released on social media, saying that it was carried out in response to what they saw as the "oppressive regime" of President Ilham Aliyev and his government's treatment of ethnic Armenians living in Azerbaijan.
The attack highlighted the vulnerability of Azerbaijan's cyber infrastructure, with many experts pointing out that the country had failed to invest adequately in cyber security measures despite growing concerns about online threats. The incident also raised questions about the role of hacktivist groups such as MMCA and their motivations for carrying out attacks on governments and critical infrastructure websites.
The 24th August 2014 Azerbaijan cyber attack was a significant event that highlighted the vulnerability of the country's cyber infrastructure. The attack used techniques such as message manipulation and external denial of service to disrupt government and critical infrastructure websites, causing widespread disruption across the country. While the Azerbaijani authorities condemned the attack and promised an investigation, MMCA claimed responsibility for the incident in a statement released on social media. The attack raised important questions about cyber security measures and the role of hacktivist groups such as MMCA in carrying out attacks on governments and critical infrastructure websites.
