exiled blogger says his life is in danger [updated June 3, 2022]

Tural Sadigli is an Azerbaijani blogger and political activist living in exile. He is the managing editor of a YouTube channel, Azad Soz – Free Word. According to Sadigli, his life is in danger as per Facebook posts, Sadigli shared on May 29 and 31 respectively.

Attention. There is a four-man squad sent to kill me in Germany. Somehow the squad acquired my home address in Germany and have been watching the house for the last week. They have been caught on security cameras. They were sent during Ilham Aliyev’s visit to Brussels. They must have thought that I will travel to Brussels from London and visit my apartment in Germany on the way. And catch me then. [German] Police already know their identities and two of them were checked by the police. Investigations continue. It is possible that they have already left [Germany].

I assure you that my life is in danger. They are really on to me this time. The order has come from the Presidential Apparatus. This is why, my parents, who both live in Baku will be staging a protest outside of the Presidential Apparatus at 14.00pm. I ask political parties, rights defenders, activists, journalists and everyone else, to come to their support.

In an interview with Meydan TV, the political activist said, it was his work exposing the extent of government corruption and specifically that of the ruling family that is the reason behind the targeting. “There is yet a journalist, or blogger, who has visited the home of the president abroad, knocked on its door and showed the audience in Azerbaijan the properties bought on their money.” The blogger also told Meydan TV that he was warned numerous times not to talk about Mehriban Aliyeva [the wife, and first Vice President] and her team. “They even tried to buy my silence, promising a monthly salary, as long as I did not touch the president and his family,” Sadigli told Meydan TV. 

This is not the first time Sadigli is threatened. Two years ago Sadigli was charged in absentia and authorities vowed to ask Interpol for his extradition. He was among a number of other activists targeted at the time. 

In addition to physical threats, Azad Soz, the YouTube vlog managed by Sadigli has also been targeted. In February of this year, AzNet Watch assisted AzadSoz to restore access to several videos that were taken off from YouTube in the absence of any explanation, and likely as a result of fake “complaints.” All of the videos were about SOCAR – the state oil company, its former president Rovnaq Abdullayev and his cousin Anar Alizada. The videos explain how Azad Soz discovered in their investigations that Anar Alizade owned a fake Turkish passport by another name. At the time of takedowns, Sadigli, told AzNet Watch that the only notification that he received from YouTube was an email telling him he was subject to NetzDG Appeals and that in all likelihood, it was the state oil company and Anar Alizada behind these requests.

Similar removals took place on the channel’s Facebook page. In both cases, the videos were restored following the intervention of a third party on behalf of AzadSoz. 

But the targeting did not stop there. According to Sadigli, the Facebook page was targeted again in April. “They [government sponsored trolls and actors] are studying old pictures, trying to identify violence that could be then reported by hundreds of fake accounts to Facebook as community guideline violations,” wrote the blogger on his Facebook on April 5.

Last month, in May, Azad Soz’s TikTok account was targeted as well. The account was shut down by the platform according to Sadigli. “You can shut them down, but we will open new ones. You won’t succeed at silencing Azad Soz [Free Word],” wrote Sadigli on Facebook. Previously AzadSoz was the target of inauthentic accounts on Facebook. The Guardian published this story explaining how Azad Soz’s Facebook account was flooded with over 1.5k comments over a post about two men sentenced to eight months. The Guardian investigation analyzed the top 300 comments and discovers that 294 out of 300 comments were inauthentic Facebook pages.

In 2018, Tural Sadigli, was among exiled political activists involved in a political campaign, called “Know Your Dictator.

blogger charged with drug possession sentenced to four months [Updated June 28]

[Update June 28] On June 25, the District Court rejected Ramazanov’s request to be moved under house arrest. The blogger’s lawyer Elchin Sadigov said they will appeal the decision.

[Update June 13] According to reporting by Turan News Agency, Ramazanov was taken to the Republican Psychiatric Hospital for tests. Ramazanov’s lawyer said this was not uncommon given the charges leveled against Ramazanov. 

On May 21, a court in Baku charged blogger Rashad Ramazanov (pen-name Rashad Hagigat Agaaddin) with illegal drug possession in large quantity, with an intention to sell under criminal code article 234.4.3, sentencing the blogger to four months in pretrial detention. Ramazanov was detained on May 20 according to reports by local media.

This is not the first time, Ramazanov has been detained. In 2013, the blogger was sentenced to nine years in jail on similar charges. At the time, rights groups, described the charges as trumped up. Officials claimed to have found heroin on the blogger. Ramazanov was released from jail in 2019 as part of a pardon issued by President Ilham Aliyev.

Ramazanov, often criticized the state on social media. According to human rights defender Rufat Safarov, the charges leveled against the blogger this time, are also related to his active criticism of the state.

If found guilty the blogger is facing anywhere between 5 to 12 years behind bars.

[Update] According to Turan News Agency, blogger Ramazanov said he was tortured in police custody. The ministry of the interior denied the claims. On May 27, the Baku appeal court reviewed the blogger’s case but ruled to keep Ramazanov behind bars reported Turan News Agency.

Blogger sentenced to 28 days in administrative detention [updated May 22, 2022]

[Update] On May 18, the appeal court denied the blogger’s appeal, refusing to review the blogger’s statement that he voluntarily showed up at the police station. The court also dismissed discrepancies in the case presented by the defense including the alleged claim that the blogger was released a day after his detention or that instead of an administrative sentence, the blogger should have been fined as this is the first time he is held criminally liable. 

On May 11, blogger Eyvaz Yakhyaoglu was sentenced to 28 days of administrative detention in Shirvan province of Azerbaijan. The blogger was accused of disobeying police according to reporting by Turan News Agency. 

The blogger, a member of the Azerbaijan Nationalist Democratic Party (ANDP) was called into questioning on May 9. According to the chairman of the political party, he was sentenced the following day. The party is certain that Yakhyaoglu’s prosecution is related to his online activism, specifically his YouTube channel “Shirvan TV – Eyvaz Eloglu.” 

The blogger often discussed violations of basic human rights in Shirvan, squandering of state property, and indifference of officials to the complaints of citizens. The blogger was warned several times before getting arrested, the party’s chairman, Galandar Mukhtarli told Turan News Agency.  

The local police allege Yakhyaoglu humiliated the local police officers outside the main building on May 9 and refused to stop after being called to order. The blogger denied the allegations, saying he arrived at the police station as per the invite and did not humiliate anybody.

blogger handed seven year jail sentence [Updated May 5]

[Update] According to OC Media, Gurbanov was relocated to a prison, which the lawyer says, is in breach of the law. Speaking to OC Media, lawyer Fariz Namazli said, the relocation was illegal as the defendant is awaiting the result of an appeal case. “This [the decision to relocate Gurbanov] was explained to me by the fact that the detention centre was overcrowded and there were a large number of detainees,” Namazli told OC Media. Meanwhile, Gurbanov’s brother said his brother was placed in solitary confinement over an alleged fight. Gurbanov’s lawyer Namazli could not confirm but said he has filed an appeal for further investigation. 

On April 15, blogger, Aslan Gurbanov was sentenced to seven years on charges of calls to overthrow the government and incitement of national, religious, and social hatred, according to Azadliq Radio, Azerbaijan Service for Radio Free Liberty. Gurbanov was arrested on July 14. During his arrest, the blogger suffered from a seizure according to the Justice for Journalists records.

Gurbanov was arrested by the State Security Services and sentenced to four months detention. He was kept at the SSS’s pre-trial detention facility until the trial. 

According to the Azadliq Radio report the blogger was accused of anti-government propaganda on social media platforms and instigated national discrimination – the accusations, Gurbanov refutes. Contrary to the alleged claims that the blogger was disseminating false stories about the discrimination against the Talysh people – an ethnic minority group in Azerbaijan. 

In a statement issued by the Talysh Public Council of Azerbaijan, the group said, Gurbanov promoted Talysh culture and literature, and that accusing the blogger of plotting against the state was unsubstantiated. 

Gurbanov is not the first Talysh activist to be targeted in Azerbaijan. In 2007, the then editor of Talysho Syado (‘Talysh Voice’) newspaper Novruzali Mamedov was arrested initially on charges of ‘resisting law enforcement.’ He was later charged with treason. In his first 15 days in custody, Mamedov was held incommunicado at a [now former] Ministry of National Security detention center, and neither family members nor lawyers were able to visit him. In June 2008, Mamedov was convicted of treason for the ‘distribution of Talysh nationalist ideas and attempts to destroy the foundations of the Azerbaijani state’ and sentenced to 10 years in prison in a closed trial, in absence of his defense attorney, relatives, and the press. The prosecutors alleged that Mamedov received money from Iran to publish the newspaper, but failed to explain or comment on the charges publicly.

Mamedov died in prison in August 2009 as a result of a variety of health problems for which he never received adequate medical care reported Radio Liberty. 

In September 2013, another Talysh journalist, Hilal Mamedov was sentenced to five years in jail on charges of selling drugs, high treason including espionage for Iran, and incitement to national, racial, social, and religious hatred and hostility. Hilal Mamedov took over the editorial of the Talysho Syado after Novruzali Mamedov’s arrest. The journalist was pardoned in 2016 following the Presidential pardon decree. 

exiled blogger continues to receive threats [updated June 15, 2022]

[Update June 15] On June 12, French police arrested two men suspected of being sent to France to kill Mirzali. According to RSF, the two men – one Azerbaijani and the second Moldovan of Turkish origin – “were driving Polish-registered cars, and both had Mirzali’s address.” 

Mirzali tweeted about the arrest too:

The blogger also said that the government of Azerbaijan has filed three separate lawsuits against him on June 3. Defiant, Mirzali vowed to continue his activism regardless of threats. 

[Update] On April 26, 2022, a French court arrested and charged four men who were behind the stabbing of Mirzali according to the personal account of the blogger shared with AIW. The four men are accused of attempted murder as part of an organized group.

[Update] On June 1, a new attack targeting Mirzali took place outside of his apartment in France. According to the blogger’s personal account, someone broke the windows of his car and left a note behind, that said, “This is for you.”

He continues to receive threats via messages sent to his phone. The most recent one Mirzali received during an interview with RFERL, said, “you should behave yourself when I’m around.”

A statement issued by Reporters Without Borders on June 4, said, “Reporters Without Borders (RSF) calls on Azerbaijani President Ilham Aliyev to put an immediate stop to all threats and violence against Mahammad Mirzali, an Azerbaijani video blogger who is a refugee in France. He was badly stabbed in an attack last March and continues to be threatened near his home for criticizing his country’s authoritarian leader.”

On March 30, exiled blogger Mahammad Mirzali shared screenshots of new threats he has been receiving from unknown numbers. In one message the sender says he has a new incriminating video of Mirzali’s sister. In another, the sender claims there is new material about members of the opposition Popular Front Party that he will be sharing shortly. Yet in another message, the sender claims to have intimate videos of Kemale Beneniyarli, the chairman of the women’s council of the Popular Front Party. In the same message, the sender offers an alternative link to a Telegram channel in case the first channel is removed.


On March 14, AIW reported that Azerbaijani blogger, Mahammad Mirzali was stabbed in the city of Nantes, France. Mirzali, runs a YouTube channel, Made in Azerbaijan. On March 14, Mirzali was attacked by a group of men and was hospitalized after receiving multiple stab wounds. According to Reporters Without Borders, Mirzali underwent surgery that lasted more than six hours.   

On March 21, while recovering at the hospital, Mirzali received yet another message on WhatsApp from a man named Andres Gragmel, “This is the last warning. We can kill you without any problem. You’ve seen that we’re not afraid of anyone (…) If you continue to insult our sisters, we’ll have you killed with a bullet to the head fired by a sniper.” 

Reporters Without Borders is asking to place Mirzali under police protection following the most recent and previous attacks [Mirzali was shot at in October 2020 as he was getting into his car.]

Threat messages and endless calls via WhatsApp from unknown numbers [often US numbers] are not new. Scores of activists in Azerbaijan have complained about this before. And Azerbaijani activists are not the only ones targeted this way. 

In May 2019, WhatsApp discovered that attackers were able to install surveillance software on both iPhones and Android phones by ringing up targets using the app’s phone call function reported FT. The surveillance software is developed by Israeli NSO Group. It transmits a malicious code even if owners of mobile devices do not answer the calls. It can also remotely and covertly extract valuable intelligence from mobile devices, by sharing all phone activity including communications and location data with the attacker once the device is infected. “In the past, human rights campaigners in the Middle East have received text messages over WhatsApp that contained links that would download Pegasus to their phones,” reported FT in May 2019. 

In October 2019, BBC reported about Faustin Rukundo, a Rwandan exile who lives in the UK, receiving a call from an unknown number on WhatsApp. When Rukondo answered, the line was silent, after that the phone went dead, reported the BBC. In Rukundo’s case, the dialed number had a country code for Sweden. He kept receiving calls from the exact same number as well as other numbers on WhatsApp. Eventually, he figured something was wrong. Then researchers at Citizen Lab confirmed that Rukundo was indeed targeted with Pegasus. 

The same month, WhatsApp “confirmed that the exploit (a software or command that leverages a specific software vulnerability in order to execute some unwanted code on the vulnerable device) was deployed by the Israeli-based surveillance tool vendor NSO Group. The exploit could deliver intrusive spyware on the target’s mobile device without the targeted person having to click on a malicious link. The targeted person would simply see a missed call on WhatsApp,” reported Amnesty International.

According to Amnesty the way the spyware worked was: 

  • The security vulnerability in question was in the code that Whatsapp uses to establish a new voice or video call. In order to exploit this, the digital attack initiated WhatsApp calls to the target’s device.
  • Attackers may have tried to exploit this issue by making calls multiple times during the night when the target was likely to be asleep and not notice these calls.
  • Successful infection of the target’s device may result in the app crashing. There is a possibility that the attacker may also remotely erase evidence of these calls from the device’s call logs.
  • Evidence of failed attacks may appear as missed calls from unknown numbers in your WhatsApp call log.

In January 2020, Nagpur-based human rights lawyer Nihalsing Rathod who has been receiving strange calls via WhatsApp over the last two years from international numbers was informed that his phone was infected. Rathod, just like Rukundo, answered these calls, only to receive silence on the other end of the line. 

According to Access Now, since 2016, some 46 countries were identified where NSO Group’s Pegasus has been in use. “Reports from Access NowCitizen Lab, and others all show that an alarming number of people targeted using Pegasus have been journalists, lawyers, and activists, whose only crime was speaking out against and reporting on the injustices in their home countries.”

Whether the same technology is being used to target Azerbaijan acvtivists is yet to be investigated. Although Azerbaijan has acquired sophisticated surveillance technology over the years, Pegasus was not one of them, not from the available information. But the resemblance of the nature of these calls and the target group, raise concerns. 

targeted harassment via telegram channels and hacked Facebook accounts [updated March 15]

[Updated] The targeting of women on telegram channels continues. On March 15, AIW was informed that the new target is the girlfriend of student activist Rustam Ismayilbeyli. Ismayilbeyli was targeted in September 2020 when a fake profile that belonged to the state security services informed Ismayilbeyli that personal information including intimate photos of Ismayilbeyli and his girlfriend will be sent to his friends and acquaintances unless he steps down from being an organizer of an upcoming rally and starts collaborating with them. Ismayilbeyli told AIW that those photos are now being circulated on the same telegram channels that earlier targeted journalist Fatima Movlamli, activists Gulnara Mehdiyeva and Narmin Shahmarzade.  

On March 14, Hikmat Hajiyev, assistant to President Ilham Aliyev said the local law enforcement is investigating the complaint by the activist Narmin Shahmarzade on the invasion of her privacy.

On March 13, activist, Vafa Nagi reported about her Facebook profile being compromised. Nagi, challenged local municipal authorities when she decided to run for the election in 2019 and won. For the first time, in Azerbaijan’s history of municipal elections [first municipal elections were held in December 1999] a representative of the feminist movement (or any activist) was elected. But her victory came at a cost. After attending one of the first meetings in her new role, Nagi realized there were inaccuracies in financial reports. When she asked that the head of the local municipality shared the full report she became a problem. This problem, needed a solution and so in an attempt to humiliate Nagi in her village, someone started posting her pictures from her Instagram across the village. There she was enjoying the sun on the beach, or elsewhere, smiling, looking happy. But that is not how the village community interpreted these photos. Azerbaijan has a complicated relationship with women’s rights, as evidence suggests especially from a recent wave of attacks against feminists who organized and attended the March 8th protest in the capital Baku. When the “picture campaign” ended with a fiasco, more serious measures were taken against Nagi. She was accused of defamation by an official and an employee of the rural house of culture. The two men claimed Nagi’s Facebook posts had damaged their business reputation. Although charges were dropped, the municipality did not stop there. The long battle ended when Nagi’s status as elected municipal official was taken from her. According to OC Media Nagi was deprived of her position in a vote by the municipal council on 20 August 2020, at the time, when she was receiving medical treatment abroad. Finally, Nagi was among the women who participated in a protest organized on March 8, 2021.

In addition, journalist Aysel Umudova, wrote on her Facebook profile, that police been visiting homes of all women identified during the rally including hers, except at the wrong address.

Another women’s rights activist targeted was Rabiyya Mammadova. After her interview with VoA Azerbaijan Service aired on March 13, she became a target of trolls accusing Mammadova of lying. In her interview, Mammadova explained how plainclothed officers stopped the taxi she was in, on her way to meet other women activists. The officer grabbed her by her throat and started suffocating her. She also received several blows to her head. As a result, she lost partial hearing in her right ear and her arm broken previously by the police was also injured. Mammadova was also among independent candidates who ran for municipal elections in 2019. But due to election fraud, she did not win and in January 2020 she was accused of defamation while the evidence of fraud Mammadova documented was dismissed. On the day of the election, she spotted a group of women, who were engaged in carousel voting, a common vote-rigging tactic. Mammadova called the group of women dishonest, which angered one of the women who demanded an apology and 1000AZN [600USD] in compensation. Her complaint was rejected in a court hearing. But this did not stop Mammadova from running in the snap parliamentary election in February 2020. She did not win. Nor did many of the independent candidates who ran for the national assembly. Defiant, Mammadova stood outside the Central Election Committee protesting election fraud. Other candidates joined Mammadova outside the CEC. By the evening, the police cordoned off the protesters and used violence to disperse the crowd. During the police intervention, scores of candidates, activists, and journalists were injured. Mammadova had her arm broken. Police denied anyone was injured despite reports and evidence.       

***

In recent days, at least three telegram channels were reported for sharing profane content targeting women in Azerbaijan. One channel called “Wretched men club” shared sensitive videos of journalist Fatima Movlamli, and exiled dissident blogger Mahammad Mirzali’s sister. Another group called “Expose bad-mannered girls” has targeted other women activists. A third one, targeted specifically one woman whose Facebook account was hacked shortly after the International Women’s Day march in Baku. 

In the past, other women journalists and activists were targeted in an online harassment campaign. 

Most recently activist Gulnara Mehdiyeva was targeted in a video shared via Facebook, containing a series of leaked private audio messages, that were stolen when Mehdiyeva’s social media accounts and emails were hacked last year

On March 9, Activist Narmin Shahmarzade’s Facebook profile was hacked, her name changed alluding to her interference with people’s private lives. The hackers flooded her Facebook feed with private messages, some of which were fake, and shared nude photographs of her, including at least one edited photo and audio. Several hours later, a Telegram channel was set up, sharing Shahmarzade’s intimate photos. In an interview with VoA Azerbaijan service, Shahmarzade said, “When my account was hacked, video footage and other posts with criticism of the ruling government were deleted. Then, my personal messages on Facebook messenger were compromised. Some of them were shared after being edited and taken out of context. My personal phone number was exposed and as a result, I received numerous calls and messages of threatening nature.” Shahmarzade said, she has informed the Ministry of the Interior and the State Security Services and describes what happened to her, a crime and that she will be going to court. Shahmarzade also pointed out to AIW that the hacker who compromised her Facebook profile is likely the same person or member of the same group that targeted activist Gulnara Mehdiyeva last year because at least one of the audio that was shared via Shahmarzade’s hacked Facebook account targeting her, does not even belong to the activist and that she never had access to. Contrary, it was among material hijacked from Gulnara Mehdiyeva. 

Among the women targeted, is also dissident blogger Mahammad Mirzali’s sister. Mirzali told AIW that the intimate video of his sister was leaked to harm him. “On February 15 my family members and I received several messages from a US number threatening me to stop my work. Otherwise, they told me they would release the videos of my sister. They told me they were not joking. They leaked the video on March 5. Later they shared the video on telegram channels. The same video was also sent to our relatives,” explained Mirzali. Mirzali suspects the authorities are behind this nasty campaign against his family. On March 14, Mirzali was reportedly stabbed by a group of unknown men. Mirzali is currently at the hospital. 

In September 2020, activist Rustam Ismayilbeyli was intimidated by someone who presented himself as an employee of state security that unless Ismayilbeyli did not stop his activism, intimate pictures of his girlfriend would be leaked online. 

In 2019, journalist Sevinc Osmangizi was the target of a smear campaign that variously accused her of being a double agent and working as a spy selling government secrets. 

The same year, journalist Fatima Movlamli was once again targeted with a fake Facebook page created under her name, sharing intimate photos and videos of her in her bed

In 2012, journalist Khadija Ismayilova was targeted in a similar campaign after receiving a package containing photos and videos of intimate nature all taken at her apartment. 

In 2010, at least two male journalists were targeted with sex tapes that were leaked and aired on prime-time television.

So far, only one journalist secured legal victory – Khadija Ismayilova. In January 2019, the European Court of Human Rights ruled that the government of Azerbaijan must compensate Ismayilova for its failure to investigate attempts to blackmail her.

In all of the incidents mentioned here, the targets voiced their suspicion of the government involvement behind these attacks. Meanwhile, the authorities either refute or remain silent about these allegations.

Finally, according to the definitions of online harassment as noted in this PEN America manual on online abuse in the last few days, it is safe to say the following forms of harassment have been documented:

Cross-Platform Harassment:  coordinated and deliberately deployed across multiple social media and communications platforms, taking advantage of the fact that most platforms only moderate content on their own sites;

Dogpiling (cyber-mob attacks): When a large group of abusers collectively attacks a target through a barrage of threats, slurs, insults, and other abusive tactics.

  • Outrage/Shame Mobs: A form of mob justice focused on publicly exposing, humiliating, and punishing a target, often for expressing opinions on politically charged topics or ideas the outrage mob disagrees with and/or has taken out of context in order to promote a particular agenda. 

Cyberstalking: In a legal context, “cyberstalking” is the prolonged and repeated use of abusive behaviors online (a “course of conduct”) intended “to kill, injure, harass, intimidate, or place under surveillance with intent to kill, injure, harass, or intimidate” a target.

Dog Whistling: Using words or symbols with a double (or coded) meaning that is abusive or harmful, sometimes to signal a group of online abusers to attack a specific target.

Doxxing: The publishing of sensitive personal information online—including home address, email, phone number, social security number, photos, etc.—to harass, intimidate, extort, stalk, or steal the identity of a target.

Hacking: The unauthorized intrusion into a device or network, hacking is often carried out with the intention to attack, harm, or incriminate another individual by stealing their data, violating their privacy, or infecting their devices with viruses. When hacking is used to perform illegal activities or intimidate a target, it is a cybercrime.

Nonconsensual intimate images (aka revenge port):  Nonconsensual pornography is “the distribution of private, sexually-explicit images [or videos] of individuals without their consent”.

Online Sexual Harassment (aka, Cybersexual Abuse, Gender-Based Harassment):  

Sextortion: A form of black mail in which an abuser threatens “to expose a nude or sexually explicit image in order to get a person to do something.” 

Unsolicited Pornography: Sending sexually explicit or violent images and videos to a target.

Unwanted Sexualization: Sending “unwelcome sexual requests, comments and content” to a target.