Check Point Research uncovers a malicious campaign targeting Armenian based targets

Feb 16 2023
  • Amid rising tensions between Azerbaijan and Armenia, Check Point Research identified a malicious campaign against entities in Armenia
  • Malware used in the campaign aims to remotely control compromised machines and carry out surveillance operations
  • CPR analysis shows clear indication of these attackers targeting corporate environments of Armenian targets

The Republic of Artsakh, also known as the Nagorno-Karabakh Republic, is a breakaway region in the South Caucasus. With a majority ethnic Armenian population, it is recognized internationally as part of Azerbaijan. It is a de facto enclave within Azerbaijan, with the only land route to Armenia through the Lachin corridor, which has been under the control of Russian peacekeepers since the end of the Second Nagorno-Karabakh War in 2020. The situation in Artsakh is tense, with frequent ceasefire violations and sporadic outbreaks of violence. For more than two decades, this unresolved, highly militarized ethno-nationalist territorial conflict continues to be a source of tension between Armenia and Azerbaijan.

Amid rising tensions since late 2022, Check Point Research identified a malicious campaign against entities in Armenia. The malware distributed in this campaign is a new version of a backdoor we track as OxtaRAT, an AutoIt-based tool for remote access and desktop surveillance.

The tool capabilities include searching for and exfiltrating files from the infected machine, recording the video from the web camera and desktop, remotely controlling the compromised machine, installing web shell, performing port scanning and more.

Figure 1 – The infection chain of the campaign

Compared to previous campaigns of this threat actor, the latest campaign from November 2022 presents changes in the infection chain, improved operational security and new functionality to improve the ways to steal the victim’s data.

The threat actors behind these attacks have been targeting human rights organizations, dissidents, and independent media in Azerbaijan for several years. This is the first time there is a clear indication of these attackers using OxtaRAT against Armenian targets and targeting corporate environments.

Although not widely discussed, previous versions of the OxtaRAT backdoor were used in earlier attacks against Azerbaijani political and human rights activists – or, when the targets were not disclosed publicly, their lures referenced Azerbaijan-Armenia tensions around Artsakh. The older versions of OxtaRAT have significantly less functionality than the new variant but contain similar code and names for most of the commands and the same C&C communication pattern.

Harmony Endpoint provides comprehensive endpoint protection at the highest security level, enriched by the power of ThreatCloud. ThreatCloud, the brain behind all of Check Point’s products, combines the latest AI technologies with big data threat intelligence to prevent the most advanced attacks- crucial to avoid security breaches and data compromises.

In addition, Check Point customers remain protected against the threat described in this research with

Trojan.WIN32.OxtaRAT.A

Trojan.WIN32.OxtaRAT.B

Armenia accuses Azerbaijan’s armed forces of violating ceasefire agreement

Sept 23 2022

Armenia’s defence ministry on Friday accused Azerbaijan’s armed forces of opening fire on Armenian positions, in violation of a ceasefire agreement, the ministry said in a post on social media.

“On September 23, at 0740 (0340 GMT), units of the Azerbaijani armed forces again violated the ceasefire regime by firing from different positions against Armenian combat positions located in the eastern area of

the Armenian-Azerbaijani border,” the ministry said in a post on Facebook on Friday.

Armenia said it had opened retaliatory fire and reported no losses among its service personnel.

There was no immediate comment from Azerbaijan on the claims. Earlier this week Baku accused Armenia of staging “provocations” along the shared border by firing mortars and grenades at its forces.

Fighting between the two sides erupted earlier this month in clashes that left almost 200 soldiers dead – the bloodiest confrontation since a six-week war between the two ex-Soviet countries in 2020.

The fighting is linked to decades-old hostilities over control of the Nagorno-Karabakh region, internationally recognised as part of Azerbaijan but until 2020 largely controlled by the majority ethnic Armenian population.

Armenia said Azerbaijan attacked its territory and seized settlements inside its borders, beyond the disputed Nagorno-Karabakh region. Azerbaijan said it as responding to “provocations” from the Armenian side.

Russia is a military ally of Armenia though also tries to maintain friendly relations with Azerbaijan and has resisted Yerevan’s calls to trigger a mutual self-defence clause. Baku is backed militarily, financially and politically by Turkey.

(This story has not been edited by Business Standard staff and is auto-generated from a syndicated feed.)

https://www.business-standard.com/article/international/armenia-accuses-azerbaijan-s-armed-forces-of-violating-ceasefire-agreement-122092300424_1.html

READ ALSO

Armenia says Azerbaijan broke ceasefire

https://finance.yahoo.com/news/armenia-says-azerbaijan-broke-ceasefire-055138677.html

Armenia accuses Azerbaijan of unspeakable atrocities
https://news.yahoo.com/un-armenia-accuses-azerbaijan-unspeakable-231935494.html
Armenia, Azerbaijan accuse each other of violating ceasefire pact – EgyptToday
https://www.egypttoday.com/Article/1/119402/Armenia-Azerbaijan-accuse-each-other-of-violating-ceasefire-pact
Armenia and Azerbaijan accuse each other of breaking cease-fire | Taiwan News | 2022-09-23 10:18:00

Reflections from the 101st ARS of Eastern USA Convention

By Kohar Bargamian Teague (Kohar Mardig)
101st ARS of Eastern USA Convention Reporter 

On the first day of the 101st ARS of Eastern USA Convention, delegates arrived in the hotel lobby to a warm welcome from members of the ARS North Carolina “Nayiri” Chapter: Judy Hagopian Edwards, Lusya Shmavonian Schnelli and Anita Mangasarian Bolz. By the time the opening session in the evening had begun, all knew the legendary story of the newly-established chapter. The chapter’s start was very William Saroyanesque – “See if the race will not live again when two of them meet.”  Shmavonian Schnelli explained, “It was our family’s fascination with the pineapple and my son’s taking a picture of Ungerouhi Judy’s Pineapple Realtor sign while on a bike trip that was the catalyst. The pineapple and that picture connected us. My son came back from his biking trip with the picture and noticed that the realtor’s last name on the sign had an -ian at the end of the name. I reached out to Judy with a simple telephone call, and the rest is history.”

When the 2020 Artsakh War began, Shmavonian Schnelli, Hagopian Edwards and Mangasarian Bolz knew that they needed to organize humanitarian efforts. With the administrative assistance of ARS-EUSA executive director Vartouhie Chiloyan and the ARS-EUSA executive board, they formed North Carolina’s first ARS chapter. Like the founding members of the ARS over a century ago, Shmavonian Schnelli knew that there was no such thing as “sitting on the sidelines;” Artsakh’s soldiers and citizens alike needed aid. The fledgling chapter and its members have already made a profound impact—to rise up, organize and serve the noble cause of providing humanitarian and educational aid for all Armenians in the diaspora and homeland. We are sure to see many more great things come from this vibrant chapter.

The ARS North Carolina “Nayiri” Chapter was not the only “hot” act at the convention. First-time delegates not only excelled in their duties, but they also went above and beyond and filled the roles of tivan, secretaries and committee members. After the reading of the English meeting minutes of the first session, the convention cheered and clapped hands for a job well done. Both English meeting minute scribers, Areni Margosian and Ani Aroyan, quickly explained, “This is not our first go around with writing minutes; the AYF has trained us well with taking minutes for AYF chapter meetings and conventions.” 

Equally impressive was the resolutions committee; three ARS members—Artvine Nekrourian, Hagopian Edwards and Sossy Shahinian Sagherian—deftly crafted resolutions and made the language clear for the new ARS-ER Board to understand and execute. Hagopian Edwards described her participation on the committee as “total immersion!” Fascinated by the process, Nekrourian admitted, “There is a fine line and balance between what the committee received as a resolution and ‘the needed cleaning up of the language’ so that the intent of the author is maintained.” Shahinian Sagherian took it all in stride knowing diligence in listening was the key in designing a resolution that matched the convention’s wishes. She found that her role on the committee was a valuable experience.

The 101st ARS of Eastern USA Convention delegates were not shy to share their thoughts. On the contrary, every delegate needed to share their thoughts on everything from the smallest of issues (order of agenda, breaks, lunch, etc.) to the topics at hand (funding sources, leadership and strategy). Delegates were grateful to convention chairpersons Shakeh Basmajian and MaryAnne Bonjuklian and all the committee members. For many, this convention was their first time—in a long time—attending an in-person meeting—a welcome break from the Zoom meetings of the pandemic.

‘Singing with the stars’ at the 101st ARS-EUSA Convention

On Friday night, the convention delegates and guests (who did not have convention/committee duties to complete) organically commandeered the entire hotel outdoor pool patio and gave new meaning to “singing with the stars,” as Armenian revolutionary and love songs echoed in the summer evening air. The ARS-ER Convention’s lead singing stars were Yn. Maggie Kouyoumdjian, Silva Kouyoumdjian, Marina Yakoubian. 

On Sunday morning August 21, the tone of the convention was unified. With the new Board elected, the ARS-EUSA Board and delegates were energized to return to their chapters and members and carry out the established programs of the ARS-EUSA and help plan the strategic growth of funding and membership resources, as well as maintain vigilance in providing humanitarian aid to Armenians in crisis zones.

Many ARS members shared their heartfelt gratitude for the inspiring gathering. Heather Krafian and Maral Nakashian wished the new Board success as they stepped down upon completing their terms. Angele Manoogian presented the new Board with a generous donation. The convention cheered and thanked her for her unwavering commitment and generosity to the ARS Eastern USA. The ARS-EUSA Board was able to present the North Carolina chapter with seed money to fund their projects through funds collected from the Saturday night gala raffle and the convention’s Sergeant at Arms.  

The chapters that voted and sent delegates to the 2022 convention should be commended. Each delegate contributed their very best as they listened, learned and mentored. One should always strive to “leave it better than you found it,” reminded Krafian. Congratulations to all the delegates. You made a difference.

The ARS Eastern USA has 32 chapters located throughout the New England, Mid-Atlantic, Midwestern and Southeastern regions of the United States.


Political scientist: Ukraine has become a testing ground

ARMINFO
Armenia – Aug 25 2022
David Stepanyan

ArmInfo.There are two tendencies around the Ukrainian war, that have already clearly  manifested themselves. Professor of Political Science at YSU Faculty  of International Relations Garik Keryan expressed a similar opinion  to ArmInfo.

“Based on the fact that, as of today, actually, there is actually not  a war between Ukraine and Russia, but a war between Russia and NATO  in Ukraine, we have to state the fact that Ukraine has turned into an  arena for experimenting with various types of weapons. First of all,  the warring parties spend the remaining outdated arsenals since World  War II,” he said.

At the same time, according to the political scientist, the warring  parties are also quite successfully testing weapons developed in  recent decades in Ukraine, including the latest, ultra-modern types  of weapons that are being tested in real combat conditions for the  first time. Meanwhile, in the opinion of Keryan, such testing has its   price and great importance from a commercial point of view in the  world arms markets.

In this light, the political scientist recalled that after testing  Israeli and Turkish UAVs in Artsakh, now their testing in Ukraine  significantly contributes to the growth of demand in international  arms markets. Thus, big money is made on Slavic blood. Keryan  believes that this is exactly what explains the desire of the West  not to allow the end of the war in Ukraine, as well as their regular  encouragement of Ukrainian President Zelensky in order to keep him  from negotiations with Moscow.

“The second tendencyis the deliberate weakening of the Astana format  by Western strategists in order to further weaken Russia’s position.  In this light, the return to the failed Iran nuclear deal does not  seem at all coincidental. A successful completion of the deal will  allow the West to achieve a double effect. The lifting of sanctions  against Iran will allow Tehran to restore their positions in the  world energy markets, which will immediately lead to a weakening of  the energy dependence of the West on the Russian Federation. In  parallel, Moscow and Ankara will lose the opportunity to use the  contradictions between the West and Iran as a diplomatic lever for  their own purposes,” the political scientist summed up.

Prime Minister Pashinyan, Prime Minister Garibashvili to meet at Armenian-Georgian border

Save

Share

 13:01,

YEREVAN, AUGUST 19, ARMENPRESS. Prime Minister of Armenia Nikol Pashinyan and Prime Minister of Georgia Irakli Garibashvili will meet at the Armenian-Georgian border on August 19, the government said.

The official opening of the Friendship Bridge of the Armenian-Georgian border is expected.

The construction of the bridge in the Sadakhlo-Bagratashen checkpoint of the Armenian-Georgian border began in 2021 and has been completed.

AW: Condolences and Beyond

Without a doubt, by unfortunate circumstances of blind destiny, the Armenian nation today lives through a continuous chain of disastrous mishaps. The latest – hopefully, the last – of these dark episodes conflagrating at the Surmalu Trade Center, as a massive explosion in the heart of Yerevan — the sacred capital city of Armenians worldwide, because of which innocent citizens were killed and injured, and missing persons were recorded.

The Armenian Relief Society (ARS) expresses its solidarity and deepest condolences to the victims’ families and wishes a speedy recovery to the injured and strength, courage and patience to our compatriots.

Over the millennia of our existence, as a creative, constructive nation rooted in our highlands, unique language, culture and faith, often martyred in unequal battles in the name of those tenets, today we stand on the edge of a menacing future. At this moment of crisis, we believe that the solution to our unresolved issues will not come from the outside, but from our own people. The Armenian nation will work to ensure its recovery and unfettered progress toward a bright future.

In the shadow of these dark days, as in past days of joy and sorrow, born and raised in the very bosom of the Armenian people, the ARS is always steadfast to its humanitarian oath, “With the People, For the People,” and shall always be the intrepid guardian of our people’s spiritual and physical fortresses. As a devoted mother, it shares the pain of its people, mixing tears of sorrow with the families and friends of those martyred in the ongoing struggle for our nation’s right to live free and secure across its patrimony. May the Lord grant them eternal life, as they shall have in the ever united hearts of a grateful nation.

Armenian Relief Society, Inc. (ARS) is an independent, non-governmental and non-sectarian organization which serves the humanitarian needs of the Armenian people and seeks to preserve the cultural identity of the Armenian nation. It mobilizes communities to advance the goals of all sectors of humanity. For well over a century, it has pioneered solutions to address the challenges that impact our society.


In Armenia, farmers demand to solve problem with water

CAUCASIAN KNOT
Aug 17 2022

Residents of a village in the Shirak Region have temporarily blocked the road from Artik to Alagyaz. The protestors demand from the authorities to solve the problem with irrigation water.

The “Caucasian Knot” has reported that on July 15, residents of the villages of Getk and Garibdjanyan of the Shirak Region blocked the road from Gyumri to Armavir with the demand to supply their villages with water for irrigation. According to the protestors, they are losing crops because of the unresolved problem with water supply.

Today, residents of the village of Mantash in the Shirak Region have blocked the road from Artik to Alagyaz. The protestors demand to solve the problem with irrigation water. They have unblocked the road after receiving the promises from the authorities that the problem will be solved, reports Ara Sukiasyan, the secretary for the Artik community administration.

According to Ara Sukiasyan, the villagers face the problem with supply of water for irrigation every year, since the local water reservoir is the only source of both drinking and irrigation water. “Responsible persons are afraid to release large amounts of water, as there is a risk that the reservoir may not have enough drinking water in winter,” the portal “News.am” quoted the secretary for the Artik community administration as saying.

This article was originally published on the Russian page of 24/7 Internet agency ‘Caucasian Knot’ on at 01:06 pm MSK. To access the full text of the article, click here.

See earlier reports:
Armenian villagers go out to protest against canal water pollution, In Armenia, villagers demand to solve problem with supply of power and water, Eleven activists detained after protest in Armenia.

Author: The Caucasian Knot
Source:
© Caucasian Knot

Lack of full-fledged government institutions guarantee of controlled chaos in Armenia – Taron Simonyan

ARMINFO
Armenia – Aug 17 2022
David Stepanyan

ArmInfo. The entire world is descending into wide-spread chaos amid the turbulent transformation, Taron Dimonyan, a former member of Armenia’s Parliament, said in an  interview with ArmInfo. 

“And we do not know when this stage is over. However, in the states  with fully-fledged government institutions the population is known to  feel more protected and, therefore, is less disposed to feel chaos.  On the other hand, in Armenia-line countries, which have no  fully-fledge government institutions, controlled chaos is normally  observed – and this chaos is controlled by external forces,” he said.

In the context of latest developments in Armenia, Mr Sinomyan said  that controlled chaos is, as a rule, has a specific goal, namely,  causing growing alarm among the population, with morals being the  target. In this context, he points out a need for government  institutions that would unify citizens in Armenia. 

He stressed a need for raising public awareness of the ongoing  developments and calling for vigilance instead of incessantly talking  about disturbing trends. Mr Simonyan highlights the importance of an  information security concept with a clear strategy and tactics. 

“The country’s political leadership needs this concept as well. The  consequences of each word need to be calculated in the intensive  talks with the enemy instead of foreign policy statements made with  domestic political ends in view. The future generations will have to  deal with the consequences. 

“The authorities’ inert behavior is unacceptable, with people waiting  for further developments only to take all the credit to themselves  and blame external forces and opponents for failures,” Mr Simonyan  said. 

Ministerial transport conference of landlocked developing countries kicks off in Turkmenistan

ARMINFO
Armenia – Aug 15 2022

ArmInfo.Today, on , the International Conference at the Level of Ministers of Transport of Landlocked Developing Countries in a hybrid format began its work at the Congress Center of the Avaza National Tourist Zone.

The forum, organized on the initiative of Turkmenistan under the auspices of the United Nations, is attended by delegations from about 40 states and over 30 international organizations. The current event also brought together heads of UN agencies, authoritative international, regional and subregional organizations and financial structures, representatives of the private sector, non-governmental associations, and academia. From the Turkmen side, members of the government, heads and representatives of a number of ministries and sectoral departments take part in the forum.

President of Turkmenistan Serdar Berdimuhamedov sent a video message to the participants of the International Conference of Transport Ministers of Landlocked Developing Countries.

In his video address to the Conference participants, the head of state, in particular, noted that “The analysis of modern processes, the prevailing trends in the world economy convincingly shows that the development of transport and communications is becoming increasingly important and decisive.”

As noted, the main objectives of the conference are to analyze the progress made by landlocked developing countries (LLDCs) in the field of sustainable transport and the related Sustainable Development Goals (SDGs), determine the impact of the coronavirus pandemic and other challenges in this context . Topics also include consideration of the key role of transport in post-COVID-19 recovery, climate change mitigation and adaptation.

The objectives of the forum are to share knowledge, experience and innovative approaches, solutions for financing infrastructure after the coronavirus pandemic, ensuring its sustainability and stability, identifying recommendations and opportunities for improving the development and maintenance of transport infrastructure in LLDCs, as well as expanding international support in the field of transport and strengthening cooperation in this area for the benefit of LLDCs.

These recommendations are expected to accelerate the achievement of the SDGs and will be presented at the Third United Nations Conference on LLDCs in 2024.