Cyber Incident Victim: National Bank of Armenia
Date:
Apr 2016
Location:
Armenia
Summary
The National Bank of Armenia was targeted in a cyberattack by the Turk Hack Team, a Turkish hacker group supporting Azerbaijan during heightened military tensions over the Nagorno-Karabakh conflict. The attackers conducted widespread DDoS operations, successfully disrupting access to the bank's website alongside other Armenian government and security portals. This offensive was part of an escalating cyberwar retaliating against earlier actions by the Armenian Monte Melkonian Cyber Army, which had previously compromised Azerbaijani government servers. The attacks coincided with armed clashes in the disputed region, with both hacker groups leveraging disruptive tactics—including service outages and data leaks—to assert their positions in the geopolitical dispute.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 2 actors | Available to members | Available to members |
Description
On April 2-3, 2016, during heightened tensions in the Nagorno-Karabakh conflict between Armenia and Azerbaijan, the Turk Hack Team (THT), a Turkish hacker group, launched coordinated cyber attacks against Armenian digital infrastructure. THT publicly declared its alignment with Azerbaijan through a Pastebin statement, citing recent military clashes that killed at least 30 soldiers as motivation for the offensive. The group targeted multiple Armenian government and financial institutions, explicitly naming the National Bank of Armenia, Armenian government portal, National Security Service, and Ministry of Energy and Economy as victims. THT employed wide-ranging disruptive tactics, with their signature DDoS (Distributed Denial of Service) capabilities previously demonstrated against Vatican City websites, successfully restricting access to the targeted sites. This attack represented a retaliatory escalation after Armenian hacker group Monte Melkonian Cyber Army (MMCA) had disabled Azerbaijani government servers the previous day through defacements and data leaks.
The cyber attacks temporarily disabled public access to the National Bank of Armenia's online services alongside other critical government platforms, though specific technical impacts like duration of downtime or data compromise were not disclosed. No financial losses or customer data breaches were confirmed in available reports. THT framed the operation as a protest against Armenia's military actions in Nagorno-Karabakh, mirroring MMCA's earlier justification for targeting Azerbaijani infrastructure. The incident occurred amid reciprocal cyber operations between factions aligned with each nation, with both hacker groups leveraging digital disruptions to amplify geopolitical tensions surrounding the territorial dispute. No mitigation measures or technical responses from Armenian authorities were documented in immediate aftermath reports.