Nation Agency for Network Services

Profile narrative

The Nation Agency for Network Services, known by the acronym NANS, is a Syrian governmental organisation headquartered in Syria. As indicated by its name, the agency is responsible for providing network services within the country. This role encompasses the management and operation of communications infrastructure. Being a state‑run body, NANS operates under the authority of the Syrian government and is likely tasked with ensuring the reliability and security of national network resources. Its position as the national agency for network services places it at a central point in Syria’s information and communications technology landscape. The agency’s responsibilities would typically include maintaining servers, hosting websites, and facilitating data exchange for governmental operations. These functions make it a critical component of the state’s digital infrastructure. The nature of its work requires ongoing attention to technical upkeep and security practices.

In April 2016, NANS became the target of a significant cyber intrusion carried out by the hacktivist group Cyber Justice Team. The attackers exploited known vulnerabilities in outdated Joomla content management systems used by the agency, demonstrating a reliance on legacy web platforms. By leveraging these historical weaknesses, they compromised multiple Syrian government and private websites associated with NANS. The breach resulted in the exfiltration and public release of approximately 43 GB of data, which included sensitive server credentials, administrative passwords, and MySQL permissions. The leaked information contained both newly obtained material and remnants from earlier intrusions, as indicated by older shell files and database entries. While the group claimed political motives against the Syrian government and ISIS, they chose to withhold files pertaining to civilian education and healthcare systems. Security analysts highlighted the incident as evidence of systemic negligence in maintaining secure web portals and keeping software up to date. The event underscored how outdated infrastructure can enable relatively simple compromises of governmental assets. It also illustrated the potential exposure of administrative and database credentials when patch management is lacking. The breach serves as a case study for the importance of regular vulnerability assessments and timely updates within national network service providers.

Incidents

1 incident linked to this organisation.