The US Army has repaired two of its technology-focused websites after hacktivists defaced them on Monday to display pro-Kurdish messages and launch personal attacks against President Donald Trump.
How the Cyber Attack Unfolded
Cybersecurity researcher Ronald Lovelace alerted Cyberscoop, which first reported the breach. The attackers targeted the error pages of two specific portals: the Open Innovation Lab and the AI Integration Center. These platforms are critical hubs used by the military to test and integrate artificial intelligence into emerging technologies.
Pro-Kurdish and Anti-Trump Messages Exposed
The manipulation became visible whenever a user attempted to access a non-existent URL on either site, triggering a modified “404 Error” page. Instead of standard system messages, visitors were met with hostile text calling Trump a “pedophile” and a “thief”. These accusations likely stem from the president’s name appearing in Justice Department documents related to the late convicted sex offender Jeffrey Epstein. Additionally, the hackers referenced Tom Barrack, the current US ambassador to Turkey, whilst demanding a “free Kurdistan”.
Security Vulnerabilities and Investigation
The defaced pages remained active until Monday, when the US Army took them offline shortly after being contacted by Cyberscoop. Military officials have not yet disclosed the exact mechanism behind the exploit. However, the affected websites run on the WordPress content management system and utilise several third-party plug-ins—common targets for cybercriminals seeking backdoor entry into web servers. It remains unclear whether any sensitive data was exfiltrated during the breach, and the Army is currently conducting a thorough investigation.
A Growing Trend of Federal Cyber Attacks
A spokesperson for the US Department of Defense declined to comment on the incident when approached by TechCrunch. This intrusion is part of a broader pattern of hacktivism, where digital activists deface web infrastructure to champion political causes. While often dismissed as mere digital vandalism, these campaigns can have severe consequences. Earlier this year, hacktivists breached the US Department of Homeland Security (DHS), leaking extensive contract records detailing how immigration agencies, such as ICE, execute deportation operations.
Wider Government Breaches
The DHS confirmed a separate security failure this week, revealing that hackers compromised an intelligence-sharing platform designed to facilitate communication between state, local, and federal law enforcement agencies.