Azerbaijan says February cyberattack on media outlets originated from Russia

A cyberattack targeting several Azerbaijani media outlets on February 20, 2025, was orchestrated from Russia, a senior lawmaker said on Friday.

Ramid Namazov, chair of the Azerbaijani parliament’s commission on countering foreign interference and hybrid threats, said the attack was conducted by APT29 — also known as Cozy Bear, Midnight Blizzard, or The Dukes — a sophisticated cyberespionage group linked to Russian intelligence.

“This was a highly technical operation by a group known for targeting governments, embassies, defense, energy sectors, and media,” Namazov said during a public hearing in Baku.

He called the incident regrettable and said it contradicted the spirit of the Azerbaijan-Russia Declaration on Allied Interaction.

Namazov suggested the attack may have been triggered by political tensions, including the suspension of the unregistered Russian cultural center "Russian House" and discussions around shutting down the local branch of Russia’s Sputnik news agency.