CISA Alert AA22-264A Iranian state actors conduct cyber operations against the government of Albania. [CISA Cybersecurity Alerts]

Published: Sept. 22, 2022, 12:57 p.m.

In July 2022, Iranian state cyber actors\u2014identifying as \u201cHomeLand Justice\u201d\u2014launched a destructive cyber attack against the Government of Albania which rendered websites and services unavailable. An FBI investigation indicates Iranian state cyber actors acquired initial access to the victim\u2019s network approximately 14 months before launching the destructive cyber attack, which included a ransomware-style file encryptor and disk wiping malware.\nAA22-264A Alert, Technical Details, and Mitigations\nCISA\u2019s free Cyber Hygiene Services (CyHy)\nCISA\u2019s zero\u2013trust principles and architecture.\nIran Cyber Threat Overview and Advisories.\nAll organizations should report incidents and anomalous activity to CISA\u2019s 24/7 Operations Center at central@cisa.dhs.gov or (888) 282-0870 and to the FBI via your local FBI field office or the FBI\u2019s 24/7 CyWatch at (855) 292-3937 or CyWatch@fbi.gov.\nLearn more about your ad choices. Visit megaphone.fm/adchoices