Development Foundation of Armenia

Summary

Turkish hackers, reportedly collaborating with Azerbaijani counterparts, targeted multiple Armenian websites, including tourism-related platforms and the official site of the Development Foundation of Armenia. The attack also compromised the Civil Service Council's website, resulting in unauthorized access to several online assets associated with Armenian organizations and a government body.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On August 7, 2017, Turkish hackers conducted cyberattacks against multiple Armenian websites, with reported assistance from Azerbaijani hackers. The attackers targeted seven websites, predominantly within Armenia’s tourism sector. Among the confirmed victims was the official website of the Development Foundation of Armenia, a government-affiliated organization focused on economic development initiatives. The attackers also successfully breached the official website of Armenia’s Civil Service Council, a state body responsible for overseeing public sector employment and administration. Information security expert Samvel Martirosyan publicly identified the perpetrators as Turkish hackers collaborating with Azerbaijani counterparts, characterizing their activities as criminal. The attacks represented a continuation of ongoing hostile cyber operations against Armenian digital infrastructure, though no specific motive beyond broader geopolitical tensions was explicitly cited in initial reports.

The immediate impact included unauthorized access to and defacement or disruption of the targeted websites, though technical specifics regarding the attack vectors, duration of downtime, or exact nature of compromises were not disclosed publicly. The breach of government-associated websites like those of the Development Foundation and Civil Service Council raised concerns about potential operational disruptions to their public services and reputational damage. No evidence of data exfiltration or secondary attacks stemming from these breaches was reported at the time. Martirosyan’s disclosure to Armenpress served as the primary public confirmation of the incidents, though no detailed statements from the affected organizations regarding mitigation efforts or forensic investigations were immediately available. The attacks underscored persistent cybersecurity vulnerabilities within Armenian institutional websites amid regional hostilities.

Sources

Sources available to members: 1 source.