CSIDB logo
Incident

Azerbaijan Judges Association

Incident posture

Attack window
Oct 2014
Location
Azerbaijan
Status
Historical
CIA posture
Available to members
Updated
2026-01-18 02:11

Linked entities

Victim
Azerbaijan Judges Association
Threat actors
1 actor
Sources
1 source

Timeline

Occurred
Oct 2014
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

Armenian hacker group Monte Melkonian Cyber Army (MMCA) compromised multiple Azerbaijani entities, including the Judges Association, Bank Education Center, and embassies in Belgium and Poland, replacing content with a political declaration asserting Armenian sovereignty over disputed territories. The attackers defaced websites with propaganda messages and embedded videos, mirroring prior MMCA operations involving large-scale DDoS attacks against Azerbaijani infrastructure and historical targeting of Turkish sites related to genocide disputes. The incident occurred amid reciprocal cyber hostilities, as Azerbaijani hackers previously breached Armenian government websites in retaliatory actions.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

1 technique

Description

On October 23, 2014, Armenian hacker group Monte Melkonian Cyber Army (MMCA) compromised multiple Azerbaijani websites, including the official site of the Azerbaijan Association of Judges of Specific Process of Law, Azerbaijan Bank Education Center, and Azerbaijani embassies in Belgium and Poland. The attackers replaced legitimate content with a defacement page displaying the message: "Artsakh belongs to Armenia! Nakhichevan wait for us! Hacked by Monte Melkonian Cyber Army." This action represented a continuation of MMCA's cyber campaigns against Azerbaijani targets, with the group explicitly stating their motivation as asserting territorial claims over the disputed Artsakh (Nagorno-Karabakh) region. The defacement included embedded multimedia components, specifically a YouTube video reinforcing their message. All affected sites remained inaccessible during the incident, displaying only the hacker-controlled content.

Historical context indicates this was part of an ongoing cyber conflict between Armenian and Azerbaijani hacker collectives. MMCA had previously executed a large-scale 300GB DDoS attack against Azerbaijani servers alongside similar defacement operations, while also targeting Turkish websites related to historical disputes over the 1915 Armenian genocide. Azerbaijani hacking groups such as the Anti-Armenia Team retaliated earlier in summer 2014 by compromising Armenian government websites, including the official site of the Armenian presidency and multiple ministries. The 2014 embassy and judiciary association attacks followed MMCA's established pattern of combining website defacements with geopolitical messaging, though no mitigation efforts or technical responses from affected organizations were documented in available reporting. The incident demonstrated the persistent use of cyber operations as an extension of the Armenia-Azerbaijan territorial dispute during this period.

Sources

Sources available to members: 1 source.

CSIDB