Cyber Incident Victim: Football Federation of Armenia
Date:
Jan 2014
Location:
Armenia
Summary
Azerbaijani hackers affiliated with the Anti-Armenia Team breached multiple Armenian government and organizational websites, including the Football Federation of Armenia, defacing them with anti-Armenian messages and videos. The cyber intrusion occurred amid ongoing geopolitical tensions between the two nations related to the Nagorno-Karabakh territorial dispute, mirroring previous digital offensives where Azerbaijani actors compromised Armenian state servers and leaked sensitive documents. While the attackers claimed responsibility for the coordinated campaign affecting over 60 domains, authorities restored the impacted sites shortly after the incident.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 3 motives | 1 technique |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On January 23, 2014, Azerbaijani hackers operating under the name "Anti-Armenia Team" executed a coordinated cyberattack against multiple Armenian government and institutional websites. The attackers compromised 64 domains, including high-profile targets such as Armenia’s Ministry of Education, police portals, city district administration sites, Artsakh State University, the "Youth For Achievements" Educational NGO, and the Football Federation of Armenia. The hackers defaced the websites by replacing legitimate content with an anti-Armenian video message and a declaration of their intrusion. A defacement page displaying their group identity and political messaging was uploaded across all breached platforms. The attackers contacted media outlets via email to claim responsibility but did not disclose whether sensitive data was exfiltrated during the breach. This incident marked a continuation of a pattern, as the same group had previously hacked Armenian government sites in August 2013 and infiltrated the National Security Service of Armenia’s servers in 2013, leaking confidential documents.
The attack disrupted public access to critical government services and institutional resources, though full functionality was restored shortly after the incident was reported. The defacement campaign aimed to amplify political tensions rooted in the protracted Nagorno-Karabakh territorial dispute between Azerbaijan and Armenia, which had previously escalated into armed conflict. While the hackers emphasized ideological motives tied to this geopolitical rivalry, the operational impact was limited to temporary service interruptions and reputational damage to the affected entities. No evidence of data destruction or long-term system compromise was confirmed in public disclosures. The Armenian authorities did not release detailed technical findings about the attack vectors or mitigation steps, but all compromised websites were operational by the time external observers verified their status. This incident underscored the persistent use of cyber operations as a tool of asymmetric conflict between the two nations.