CISA Alert AA22-264A – Iranian state actors conduct cyber operations against the government of Albania. [CISA Cybersecurity Alerts]

In July 2022, Iranian state cyber actors—identifying as “HomeLand Justice”—launched a destructive cyber attack against the Government of Albania which rendered websites and services unavailable. An FBI investigation indicates Iranian state cyber actors acquired initial access to the victim’s network approximately 14 months before launching the destructive cyber attack, which included a ransomware-style file encryptor and disk wiping malware.
AA22-264A Alert, Technical Details, and Mitigations
CISA’s free Cyber Hygiene Services (CyHy)
CISA’s zero–trust principles and architecture.
Iran Cyber Threat Overview …

access albania alert alerts attack cisa cisa alert cyber cyber operations cybersecurity fbi government homeland justice initial access investigation iranian july july 2022 justice network operations services state victim websites