ArmInfo.In recent days, Armenia has become the focus of several very serious cyber security investigations. Judging by the data that has appeared, the most advanced cyber attacks are being used against Armenia (so far there is not much data). Samvel Martirosyan, a member of the Commission on Internet Governance of Armenia, specializing in digital security and new media, said this.
"So, the first investigation was conducted by Google. Attacks on Google Chrome with the use of zero- day vulnerabilities were found. Which does not just indicate that a serious group was operating (Google is sure that these are hackers working for the state), but also that that this is a rather expensive attack. The attackers used clones of Armenian media to infect targets, "Martirosyan said, citing a link below where the list of media is presented:
https://blog.google/threat-analysis-group/how-we-protect-users-0- dayattacks/?fbclid=IwAR0EYd0YIcdjH8WIW9fg6GfRBvgxuknr_-jhWvrhsHZ3E1z 0VutepNo85aI
According to him, the next attack was carried out using the malware of the Israeli Candiru company. They also used fake sites, in particular a clone of the Armenpress news agency. Details in investigations by Citixen Lab, Microdoft.
https://citizenlab.ca/2021/07/hooking-candiru-another-mercenary-spyware -vendor-comes-intofocus/?fbclid=IwAR2fWmREz7DscYVAdXP9DfWGYLHU2V6mhAxP dCLMll2THl4q7m9cvQ_k.
https://www.microsoft.com/security/blog/2021/07/15/protecting-customers -from-a-privatesector-offensive-actor-using-0-day-exploits-and- devilstongue-malware/.
"The third investigation does not directly concern Armenia. It is about the Israeli NSO company, which actively sells the Pegasus Trojan to repressive regimes, which was used to spy on journalists and human rights defenders around the world."
Malware is used by the government of Azerbaijan, which used Pegasus against local dissidents. However, according to our information, during the war Pegasus was used by Azerbaijan against Armenian targets in the government and the army," he said.