The hackers who attacked the information resources of Global Media Group were based in local hotels

Preliminary analysis of the hacker attack on information resources belonging to Global Media Group shows that the internal infrastructure is infected with malicious software, and the central control system is completely captured.

As Oxu.Az reports, this was stated by the chairman of the parliamentary commission on countering external interference and hybrid threats, Ramid Namazov, during discussions organized by the commission on the topic "Attacks on Azerbaijan's media resources on February 20: from cyber interference to disinformation".

According to him, as a result of the attack, a computer belonging to the system administrator was captured, access was gained to the server where backups of all internet resources were stored. After that, the attackers interfered with the operation of other media resources. As a result, web server data and backups were deleted, media resources were destroyed, and access to the infrastructure was restricted.

"Naturally, the appropriate structures immediately took the necessary steps to ensure the cybersecurity of the media resources that were attacked," Namazov emphasized.

"Interestingly, even in the subsequent period, even after providing appropriate support, attempts at cyber attacks on the restored information internet resources were observed, but they were prevented. The IP addresses and domains used during the attack, as well as all connections of the group, were identified. It should be noted that the attacks were also supported from internal IP addresses of the country, it was established that some persons participating in the cyber attack are on the territory of Azerbaijan, and even which hotel they are staying in. We are talking about foreigners. This shows that this case is not an ordinary cyber attack," added the chairman of the commission.