Civil Service Council of Armenia

Summary

Turkish hackers, reportedly collaborating with Azerbaijani counterparts, targeted multiple Armenian websites, breaching seven primarily tourism-related platforms. The attack compromised the Civil Service Council's official site and the Development Foundation of Armenia's website, disrupting online services. The coordinated operation demonstrated continued hostile cyber activity against Armenian digital infrastructure by regional threat actors.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On August 7, 2017, Turkish hackers conducted cyberattacks against multiple Armenian websites, as reported by the Armenpress news agency. The attacks targeted seven websites, primarily within Armenia’s tourism sector, including the official website of the Development Foundation of Armenia. Samvel Martirosyan, an information security expert, confirmed the incidents and characterized the hackers’ actions as criminal activity. Martirosyan noted the Turkish hackers were collaborating with Azerbaijani counterparts during the operation. The attackers successfully breached the official website of Armenia’s Civil Service Council, a government body responsible for administrative oversight. No specific details regarding the attack vectors or duration of unauthorized access were disclosed in available reporting. The timing coincided with ongoing regional tensions between Armenia and Azerbaijan, though no explicit geopolitical motive was formally attributed to the attackers.

The breach of the Civil Service Council’s website represented a notable escalation due to its governmental function, though the extent of data compromise or operational disruption remained unverified. Martirosyan’s statements did not specify whether defacement, data exfiltration, or service interruption occurred across the affected sites. No immediate remediation efforts or technical responses from the targeted organizations were documented in the source material. The attacks highlighted vulnerabilities in Armenian web infrastructure, particularly within tourism-related entities and select government platforms. The incident marked a continuation of cross-border cyber operations observed in the region during this period, though attribution to specific groups or nations remained unconfirmed beyond Martirosyan’s assessment.

Sources

Sources available to members: 1 source.