Azerbaijan:
Threat Landscape Report

Azerbaijan faced a rise in cyber threats, driven by regional tensions and sophisticated actors. State-backed hackers from Russia and Iran, alongside regional hacktivists, increasingly targeted government agencies, critical industries, and media outlets.

Russian (APT29) and Iranian (Pioneer Kitten) APT groups focused on espionage and sabotage. Hacktivists from both sides of the Armenia-Azerbaijan conflict conducted defacements and leaks. Cybercriminals targeted Azerbaijani users with banking malware and ransomware.

What You Will Find In This Report?

Gain a Clear View of Azerbaijan’s Cyber Threat Landscape


Explore key incidents, threat actors, and sector-specific attacks shaping the country’s digital risk environment between 2024 and 2025.


Understand the Motives and Methods Behind the Threats


Learn how APT groups, hacktivists, and cybercriminals leveraged phishing, DDoS, and hybrid attacks to target critical Azerbaijani institutions.


Access Strategic Recommendations for National Cyber Resilience


Discover actionable guidance to fortify infrastructure, close vulnerabilities, and proactively monitor underground threats impacting .az domains.


A Free Guide To CTOs SOC Teams CTI Analysts