Twenty-two websites in Azerbaijan’s .az domain were defaced in a single day, Azerbaijan’s National Cybersecurity Agency said.
The agency linked the incidents to a hacker using the name Xscyth3, according to Vesti Baku.
Most of the affected websites offered tourism services, including tours, transfers and trips in Baku and other parts of Azerbaijan.
The incidents involved defacement, an unauthorized change to a website’s appearance or content. The agency’s statement did not say that any theft of user data had been confirmed.
Shared Infrastructure Under Review
The timing and similar nature of the attacks suggested that the websites may have shared technical or administrative infrastructure. Some of the domains had matching registration details, while 19 of the websites were hosted on the same network and used the same DNS servers.
Cybersecurity specialists advised the site owners to conduct audits and incident investigations, update their content management systems and plugins, change administrator passwords, enable multifactor authentication and examine server logs.