Comments on: The Caucasusian Knot, Policy Forum Armenia Hacked?

By: Fuat

Fuat — Wed, 07 Jan 2009 00:51:53 +0000

Onnik,

do you still have that chunk of code? If yes, could you please send it to me?

Cheers,

Fuat–

By: Onnik

Onnik — Sat, 29 Nov 2008 15:11:44 +0000

No, not me. A pity we’ve both used the same name, but anyway.

By: Ani

Ani — Sat, 29 Nov 2008 04:28:53 +0000

This doesn’t seem to be you (unless you’ve moved to Moscow)–do you know about them?

http://eng.kavkaz-uzel.ru/aboutus/

By: Ani

Ani — Sat, 13 Sep 2008 13:16:59 +0000

Yours might be seen as not simply Armenian, since you cover Georgian issues, too. The other site is more puzzling, but they could have been trying to muddy the waters slightly by including some Armenian sites. Only a theory…

By: Onnik

Onnik — Sat, 13 Sep 2008 08:27:28 +0000

Well, it crossed my mind given the timing and the Russian malware link, but I have to be honest, why would they target two Armenian sites?

By: Ani

Ani — Fri, 12 Sep 2008 20:24:29 +0000

Still think this was part of the Russian coordinated hacking effort–here’s a new article on that (there are several articles together here, so look below): http://georgiandaily.com/index.php?option=com_content&task=view&id=7619&Itemid=132

THE CYBER DIMENSION OF RUSSIA’S ATTACK ON GEORGIA

Alexander Melikishvili

A growing body of evidence suggests that Russia’s disproportionate military assault on Georgia in the aftermath of Tbilisi’s failed bid to retake the breakaway region of South Ossetia was preceded and accompanied by a series of coordinated and sophisticated cyber assaults on Georgia’s embryonic Internet infrastructure.

The distributed denial of service (DDOS) attacks against Georgian websites began almost two months before the short-lived war between Russia and Georgia (The Washington Post, August 14). In July United States-based Internet watchdogs registered DDOS attacks against the official website of the President of Georgia, Mikheil Saakashvili, which disabled the website for a 24-hour period. The attacks were detected by the command and control server in the United States, which had become operational several weeks prior to the cyber assault (International Herald Tribune, August 13; The Independent, August 17).
[…]

By: Onnik

Onnik — Sat, 02 Aug 2008 13:00:35 +0000

Thanks to Google for removing the warning on their search pages. They were quick to reassess my site after the problem became evident.

http://www.google.com/safebrowsing/diagnostic?site=http://www.oneworld.am

Apologies to all who might have been concerned by the warning. Again, I am still unsure as to how the malicious code was inserted and more importantly, who was responsible.

PFA Site is still listed as suspicious and I would recommend them to take a look at Google’s analysis in order to rectify the problem.

http://www.google.com/safebrowsing/diagnostic?site=http://www.pf-armenia.org/