Jump to content

User:Iaof2017/sandbox13

From Wikipedia, the free encyclopedia
2022 cyberattacks on Albania
Native name Sulmet kibernetike ndaj Shqipërisë në 2022
DateJuly 15, 2022 (2022-07-15)
LocationAlbania
TypeCyberattack
PerpetratorIran

Background

[edit]

Since its accession to the North Atlantic Treaty Organization (NATO) in 2009 and its subsequent candidacy for European Union (EU) membership, Albania has progressively aligned itself with Western political and security institutions.[1][2][3] This alignment has been accompanied by substantial efforts to modernise the nation's public administration, particularly through the digitalisation of key governmental functions.[4] The Albanian government has pursued a range of e-governance initiatives aimed at enhancing the efficiency, transparency, and accessibility of public services. These include the development of digital platforms for tax filing, healthcare, and other essential services, which have significantly streamlined bureaucratic processes and improved citizen engagement.[4] The adoption of these digital systems has been viewed as essential not only for the modernisation of state functions but also for Albania's continued integration into the global economies.[4] However, as Albania's digital infrastructure expanded, it simultaneously became more susceptible to cyber threats, revealing significant vulnerabilities that would later become evident in the 2022 cyberattacks on Albania.

A substantial factor in the deterioration of relations between Albania and Iran was Albania's decision to provide sanctuary to the Mujahideen-e Khalq (MEK), a prominent Iranian opposition group.[5][6] The MEK, initially founded as a Marxist-Islamist militant organisation, has a long history of engaging in insurgent activities against the Iranian government, particularly since the 1980s.[7][8] In 2013, Albania accepted the relocation of approximately 3,000 MEK members from Iraq, where they had been residing at Camp Ashraf, as part of an international resettlement program coordinated by the United States and the United Nations (UN).[8] This decision was perceived by the Iranian government as a direct affront, considering the MEK's active opposition to the Iranian regime.[9] Iran has consistently condemned Albania's hosting of the group, viewing it as tacit support for the MEK's anti-regime activities, including its public advocacy against Iranian leadership. In this context, Iran increasingly resorted to cyber operations as a form of geopolitical retaliation against those it considered complicit in harboring adversaries. The 2022 cyberattacks were thus understood as part of a broader Iranian strategy to utilise cyber capabilities in response to its diplomatic and security challenges.

Timeline

[edit]

13 July 2022: First campaign

[edit]

On 13 July 2022, Albania became the target of a highly coordinated cyberattack that disrupted key governmental services and provoked both national and international responses.[10][11] The attack, which temporarily incapacitated the e-Albania platform and other official government websites, was swiftly condemned by the Albanian government as a sophisticated and criminal act orchestrated from abroad.[12] While the origins of the cyberattack were speculated to be linked to Russian state-sponsored cyber actors, given Albania's stance on the war in Ukraine and its sanctions on Russia, later investigations suggested a different source.[13] The National Agency for Information Society (Albania) (AKSHI) temporarily suspended public online services to mitigate the damage, collaborating with cybersecurity experts, including teams from Jones Group International, Microsoft, and local technology companies.[12][14] On 18 July, President Ilir Meta publicly condemned the incident, underlining its severe implications for citizens, and reiterated his previous calls for bolstering national cybersecurity protocols.[15] Prime Minister Edi Rama, in his statements, reported that AKSHI's efforts had proven effective in containing the breach and protecting government services.[16] As investigations progressed, the cyberattack's sophistication became increasingly evident. On 20 July, Rama dismissed reports suggesting the destruction of Albanian state data or demands for ransom, clarifying that the attack was state-sponsored, not perpetrated by cybercriminals.[17][18] He also noted NATO's involvement in the nation's defense efforts against the attack.[19] On 21 July, the cyber group HomeLand Justice, which had previously published ransomware-related materials on a Russian-based website, claimed responsibility for the incident, justifying their actions by opposing Albania's hosting of MEK members.[20] The attackers encapsulated their motive in the slogan, "Why should our taxes be spent on the terrorists of Durrës?".[20] By 24 July, HomeLand Justice had released sensitive materials from Albanian state institutions, further emphasising their opposition to the nation's facilitation of the MEK.[21]

During a conference, on 29 July, Deputy Prime Minister Belinda Balluku confirmed that the attack remained a significant threat despite recovery efforts, but acknowledged the collaboration with international partners such as the Federal Bureau of Investigation (FBI) in restoring systems.[22] The Director of AKSHI Linda Karçanaj reported that 98% of online services had been restored, with key government systems remaining largely unaffected due to swift countermeasures.[23] The incident, which utilised ransomware and ZeroCleare WipeOut malware, had targeted critical government infrastructure, but no significant data loss occurred.[23] On 4 August, American cybersecurity company Mandiant attributed the attack to pro-Iranian hacker groups, positing that it was part of a broader effort to sabotage the planned Free Iran World Summit in Albania.[20][24] Mandiant identified the use of ransomware from the Roadsweep family and a new backdoor, Chimneysweep, in the operation.[24] The firm suggested that the incident aimed not only to destabilise Albania but also to signal Iran's willingness to challenge NATO-aligned nations through cyber means.[24] Culminating on 7 September, Rama announced that evidence conclusively pointed to Iran as the orchestrator of the cyberattack.[25] According to him, Iran had mobilised four distinct hacker groups, one of which had a history of cyberattacks against other Middle Eastern countries.[25] In response to the findings, Albania severed diplomatic relations with Iran, expelling Iranian diplomatic personnel from the nation.[26][27][28] However, the Iranian Ministry of Foreign Affairs denied the allegations, asserting that it too had been a victim of cyberattacks.[29] On 9 September, in retaliation, the United States imposed sanctions on the Iranian Ministry of Intelligence and its head, Esmail Khatibi, citing their involvement in cyber activities targeting its allies.[30][31][32]

10 September 2022: Second campaign

[edit]

On 10 September, Albania was confronted with a second cyberattack, attributed to the corresponding state-sponsored actors responsible for the incident in July.[33][34][35] Rama confirmed that the attack targeted the TIMS system, used to monitor individuals and vehicles at the nation's border checkpoints.[33][34] However, the Albanian authorities were able to restore the system at key locations, including Tirana International Airport and border crossings with Greece, Kosovo, and Montenegro, shortly after the disruption.[36] Despite the incident, no significant data violations or exposures were reported, and authorities reassured the public that no sensitive information had been compromised.[36] On 12 September, the Tirana Prosecutor's Office launched an investigation into the incident, which was incorporated into the case file originally opened for the July cyberattack.[37] Iranian media outlets identified several individuals allegedly involved in the attack, naming Hamid Reza Lashgarian, Mohammad Bagher Shirinkar, Mohammad Hossein Shirinkar, and Seyyed Mehdi Hashemi Toghroljerdi.[37] In a speech at the UN General Assembly on 26 September, Rama pressed for urgent and coordinated international action to counter the rising threat of state-sponsored cyberattacks.[38] On 3 October, HomeLand Justice released a large-scale data exposure, purportedly extracted from Albania's MEMEX system, a key law enforcement database used by the State Police.[39][40] The data, comprising 1.7 gigabyte of data across 49 files, allegedly contained information on approximately 100,000 individuals suspected of criminal activity.[39] In response, the Albanian police assured the public that no sensitive or classified law enforcement data had been compromised, clarifying that no ongoing investigations or operations were affected.[39]

20 December 2023: Third campaign

[edit]

On 26 December 2023, the Albanian parliament reported a cyberattack that had targeted its data system on 20 December with the intent to delete critical data.[41][42] While the incident temporarily disrupted the parliament's online presence, officials assured that the integrity of the data remained unaffected.[43] The attack, attributed to foreign hackers, was identified as an effort to manipulate infrastructure and erase data, though no data was ultimately compromised.[41] HomeLand Justice announced accountability for the incident, asserting control over the website and threatening further retribution against lawmakers.[41] On 25 December, the National Authority for Electronic Certification and Cyber Security (AKCESK) was notified of another cyberattack against Albanian telecommunications company One Albania.[44] HomeLand Justice insisted to have deleted over 2 petabytes of data from the company's network, including the internal systems of affiliated companies, and stated that this data would soon be released.[45] The group further issued a message directed at Albanian politicians, accusing them of disregarding previous warnings and framing their actions as a form of humanitarian protest.[46] They reiterated their objective to "cleanse" Albania of what they termed "terrorists", referring to the MEK, and linked One Albania's services to facilitating cyberattacks and supporting the MEK.[46]

31 January 2024: Fourth campaign

[edit]

On 31 January 2024, the Institute of Statistics (INSTAT) became the subsequent target of a cyberattack, for an additional instance attributed to HomeLand Justice.[47][48] The group compromised INSTAT's website, accounting for it to go offline and disrupting several internal systems.[49] However, the institute promptly clarified that the data from the recent 2023 census, stored on separate, secure systems, was not affected by the attack.[49] In response, INSTAT ceaseed operations its internet connections, activated emergency protocols, and initiated corporation with national cybersecurity experts to assess and mitigate the damage.[49] As a result of the disruption, the institute postponed the release of official census statistics, citing delays in their usual data dissemination processes.[49] On 13 February, it was reported that AKCESK was actively supporting INSTAT's response effortsby conducting a comprehensive examination of its infrastructure, identifying vulnerabilities, and collaborating with international cybersecurity partners to address the breach.[50][51] Investigations revealed that the incident was carried out using the MEK-DDMC.exe file, a wiper virus designed to erase data.[52] The attackers exploited an unpatched Exchange server to gain unauthorised access, subsequently infecting 40 computers and erasing data from six of them.[50] Additionally, the breach compromised critical systems, including INSTAT's Active Directory and Data Protection Manager.[50]

Investigations

[edit]

Following the cyberattacks in July 2022, an investigation led by the Detection and Response Team (DART) of Microsoft was launched to assess the attack's origins and implications.[53][54] The subsequent forensic analysis, in collaboration with Albania's authorities, identified the cyber assault as being attributed to Iranian-sponsored actors.[55] The cyberattack was meticulously planned and executed over an extended period, it began with the initial compromise of Albanian government systems in May 2021, when Iranian-affiliated actors exploited vulnerabilities in outdated software systems.[53] Once inside, the attackers established persistent access and, over the course of several months, exfiltrated critical data, including email communications from high-ranking officials in Albania's government. The attack culminated in July 2022, when the actors deployed destructive malware that wiped crucial government data and further disrupted essential public services. A distinctive feature of this attack was the use of both ransomware and wiper malware, a strategy consistent with previous cyber operations attributed to Iranian state-sponsored groups.[53] Specifically, the wiper malware deployed in this instance showed forensic links to malware used in previous Iranian attacks, such as the 2019 attack on a Middle Eastern energy company. The timing and targets of the attack were also key indicators of its political motivations, appearing to be a retaliatory measure, likely in response to cyber activities that Iran perceived as hostile, particularly those linked to the MEK. The cyberattack thus seemed to be part of a broader strategy by Iran to assert control and send a message regarding its stance on opposition activities.[53] Furthermore, the attack was marked by its use of digital tools and methods commonly associated with Iranian cyber actors, including the deployment of ransomware followed by wiper malware. The digital certificates used in the attack and the specific tactics mirrored those of previous Iranian state-sponsored operations.[53]

The investigation conducted by the Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI) also revealed a coordinated and sustained campaign by Iranian state-sponsored cyber actors, operating under the alias "HomeLand Justice."[56] The attacks were preceded by an extensive period of network infiltration and data exfiltration, extending back to 2021. The initial breach occurred approximately 14 months before the July 2022 attack, during which the cyber actors maintained persistent access to Albanian government networks. This prolonged infiltration allowed the attackers to conduct reconnaissance, harvest credentials, and exfiltrate sensitive information, particularly email content, over several months. The ransomware attack launched in July was marked by the deployment of encryption tools, followed by the use of destructive malware, specifically ZeroCleare, to erase critical data. Notably, the attackers left messages on affected systems targeting the MEK. In parallel to the cyber intrusion, HomeLand Justice employed a public-facing campaign, creating a website and social media profiles to broadcast anti-MEK rhetoric and claim responsibility for the attacks. These platforms were used to disseminate stolen Albanian government information, further underscoring the attackers’ intent to destabilize both Albania's governance and its international relations. The September 2022 wave of attacks, utilizing similar tactics, techniques, and procedures (TTPs), occurred shortly after Albania's severing of diplomatic ties with the Iranian government. The FBI and CISA's investigation highlights the advanced and persistent nature of the attack, which relied on established cyber intrusion methods, including lateral movement within the network and exfiltration of sensitive data.

Aftermath

[edit]

The North Atlantic Treaty Organization (NATO) expressed strong solidarity with Albania following the cyberattack on its national infrastructure, attributing the attack to the Iranian government.[57] The alliance condemned the malicious cyber activities, emphasising their intent to destabilise an Ally's security and disrupt daily life.[57] They reaffirmed its commitment to supporting Albania in strengthening its cyber defense capabilities to counter future threats.[57] SecretaryGeneral Jens Stoltenberg echoed this condemnation and highlighted NATO's unified stance.[58] On 21 September 2022, officials from the alliance visited Albania to assess the impact of the attack and discuss further assistance, aiming at enhancing Albania's cybersecurity resilience.[59]

  • Italy strongly condemned the large-scale cyberattacks against Albania, expressing full solidarity with the Albanian government and people.[60] Italy deemed such actions unacceptable, emphasising their detrimental impact on national security, acknowledging Albania as both a partner and ally..[60]
  • The President of Kosovo, Vjosa Osmani, strongly condemned the malicious cyberattack against Albania's critical infrastructure.[61] Osmani expressed Kosovo's full solidarity with Albania, reaffirming support for President Bajram Begaj and the Albanian government and called on Iran to be held accountable for this unprecedented act of aggression.[61]
  • The Minister of Digital Affairs of Poland, Janusz Cieszyński, expressed strong solidarity with Albania in a statement following the cyberattacks, condemning it as an act of aggression aimed at disrupting socio-economic stability.[62] The attack, which affected ordinary citizens, was denounced by Poland, particularly in the context of international law and established norms of state behavior.[62] The statement also highlighted Poland's concern over similar cyber threats targeting other Balkan states.[62] In response, Poland, in collaboration with the EU and NATO, pledged support to Albania to enhance its resilience against future cyber threats.[62]
  • The United Kingdom condemned Iran for the cyberattacks on Albania, describing them as reckless and damaging to the Albanian people.[63] Foreign Secretary James Cleverly reaffirmed the UK's strong support for Albania, aligning with NATO and other international partners in denouncing the actions and committing to future collaboration.[63]
  • The United States' response to the cyberattack on Albania emphasised the violation of international norms governing state behavior in cyberspace, particularly regarding the protection of critical infrastructure.[64] By attributing the attack to Iranian state-linked cyber actors, the U.S. condemned the intentional disruption of vital government services and the leakage of sensitive data, recognizing the far-reaching consequences of such actions on domestic, regional, and global stability.[64] The U.S. underscored its unwavering support for Albania’s recovery efforts and reaffirmed its commitment to long-term remediation.[64]

See also

[edit]

References

[edit]
  1. ^ "Nato member countries". North Atlantic Treaty Organization (NATO). 8 June 2023. Archived from the original on 3 September 2023. Retrieved 3 September 2023.
  2. ^ "Ceremony marks the accession of Albania and Croatia to Nato". North Atlantic Treaty Organization (NATO). 7 April 2009. Archived from the original on 3 September 2023. Retrieved 3 September 2023.
  3. ^ "Enlargement: Albania". European Council (EUCO). Archived from the original on 26 September 2024. Retrieved 7 November 2024.
  4. ^ a b c "Digital Public Administration factsheets–2024: Albania". European Commission (EC). Archived from the original on 23 November 2024. Retrieved 22 November 2024.
  5. ^ Karcic, Harun (8 November 2022). "How Albania Ended Up in Iran's Cyber Crosshairs". Foreign Policy. Archived from the original on 8 November 2022. Retrieved 25 November 2024.
  6. ^ Haas, Devin (5 July 2023). "Albania turns on dissident Iranian group". Emerging Europe. Archived from the original on 25 November 2024. Retrieved 25 November 2024.
  7. ^ "Who are the Iranian dissident group Mek?". British Broadcasting Corporation (BBC). 30 October 2015. Archived from the original on 3 November 2015. Retrieved 26 November 2024.
  8. ^ a b Kasapi, Albana; Pressly, Linda (11 November 2019). "The Iranian opposition fighters who mustn't think about sex". Tirana: British Broadcasting Corporation (BBC). Archived from the original on 11 November 2019. Retrieved 26 November 2024.
  9. ^ Vatanka, Alex (26 October 2022). "Albania finds itself caught in the middle as Iran and the West square off". Middle East Institute (MEI). Archived from the original on 26 October 2022. Retrieved 26 November 2024.
  10. ^ Sinoruka, Fjori (22 September 2022). "FBI: Iranian Hackers Accessed Albanian Systems Over Year Ago". Balkan Insight. Tirana. Archived from the original on 22 September 2022. Retrieved 22 November 2024.
  11. ^ "Shqipëria nën sulm kibernetik, bllokohen shërbimet publike të e-Albania" (in Albanian). Radio Evropa e Lirë. 18 July 2022. Archived from the original on 20 November 2024. Retrieved 20 November 2024.
  12. ^ a b "Sulmi kibernetik ndaj e-Albania, reagon Kryeministria: Tepër i sofistikuar" (in Albanian). A2 CNN. 17 July 2022. Archived from the original on 20 November 2024. Retrieved 20 November 2024.
  13. ^ "Sulmi kibernetik ndaj faqeve publike në Shqipëri, dyshohet të jetë rus". Dosja (in Albanian). 17 July 2022. Archived from the original on 20 November 2024. Retrieved 20 November 2024.
  14. ^ "'Sulm kibernetik nga jashtë Shqipërisë', Akshi bllokon shërbimet online" (in Albanian). Euronews Albania. 17 July 2022. Archived from the original on 20 November 2024. Retrieved 20 November 2024.
  15. ^ "Sulmi kibernetik, Meta: Kisha kërkuar marrjen e masave për të parandaluar diçka të tillë" (in Albanian). A2 CNN. 18 July 2022. Archived from the original on 20 November 2024. Retrieved 20 November 2024.
  16. ^ "Sulmi kibernetik, Rama: Kundërofensiva e Aksh-it e suksesshme, shërbimet rikthehen shumë shpejt" (in Albanian). Televizioni Klan (TV Klan). 18 July 2022. Archived from the original on 19 July 2022. Retrieved 20 November 2024.
  17. ^ "Sulmi kibernetik, Rama i prerë: Hakerat s'na kanë kërkuar 30 milionë euro, pas tyre qëndron një shtet. Lufta s'ka mbaruar" (in Albanian). ABC News. 20 July 2022. Archived from the original on 22 July 2022. Retrieved 20 November 2024.
  18. ^ "'Hakerat kërkojnë 30 mln euro', Rama përgënjeshtron: Ndalni valën e shpifjeve" (in Albanian). Euronews Albania. 20 July 2022. Archived from the original on 5 June 2023. Retrieved 20 November 2024.
  19. ^ "Sulmi kibernetik, e-Albania rikthehet në funksion! Rama: Në procesin e mbrojtjes u përfshi edhe Nato". Shqiptarja (in Albanian). 20 July 2022. Archived from the original on 20 July 2022. Retrieved 20 November 2024.
  20. ^ a b c "Roadsweep Ransomware–Likely Iranian Threat Actor Conducts Politically Motivated Disruptive Activity Against Albanian Government Organizations". Google Cloud. 4 August 2022. Archived from the original on 29 July 2024. Retrieved 21 November 2024.
  21. ^ "Sulmi kibernetik, hakerat publikojnë dokumente të institucioneve shtetërore" (in Albanian). Euronews Albania. 24 July 2022. Archived from the original on 21 November 2024. Retrieved 21 November 2024.
  22. ^ "Balluku jep detaje nga sulmi kibernetik: Po bashkëpunojmë ngushtë me Fbi" (in Albanian). Euronews Albania. 29 July 2022. Archived from the original on 2 June 2023. Retrieved 21 November 2024.
  23. ^ a b "Sulmi kibernetik/ Drejtoresha e Aksh: Mbi 98% të shërbimeve online janë tashmë funksionale" (in Albanian). Televizioni Klan (TV Klan). 29 July 2022. Archived from the original on 29 July 2022. Retrieved 21 November 2024.
  24. ^ a b c Newman, Lily Hay (4 August 2022). "An Attack on Albanian Government Suggests New Iranian Aggression". Wired. Archived from the original on 4 August 2022. Retrieved 21 November 2024.
  25. ^ a b "Sulmet kibernetike, Qeveria ndërpret marrëdhëniet diplomatike me Iranin, ambasada 24 orë afat të largohet nga Shqipëria" (in Albanian). ABC News. 7 September 2022. Archived from the original on 21 November 2024. Retrieved 21 November 2024.
  26. ^ "Shqipëria ndërpret marrëdhëniet diplomatike me Iranin" (in Albanian). Deutsche Welle (DW). 7 September 2022. Archived from the original on 7 September 2022. Retrieved 21 November 2024.
  27. ^ Cuka, Fatjon (7 September 2022). "Shqipëria ndërpret marrëdhëniet diplomatike me Iranin si 'kundërpërgjigje ndaj sulmit kibernetik'" (in Albanian). Tirana: Anadolu Agency (AA). Archived from the original on 21 November 2024. Retrieved 21 November 2024.
  28. ^ Semini, Llazar (7 September 2022). "Albania cuts diplomatic ties with Iran over July cyberattack". Tirana: Associated Press (AP). Archived from the original on 7 September 2022. Retrieved 21 November 2024.
  29. ^ Kraja, Gresa (7 September 2022). "Shqipëria akuzon Iranin për 'agresion shtetëror', ndërpret marrëdhëniet diplomatike" (in Albanian). Radio Evropa e Lirë. Archived from the original on 7 September 2022. Retrieved 21 November 2024.
  30. ^ Bajak, Frank; Hussein, Fatima (9 September 2022). "U.S. sanctions Iran intelligence over Albania cyberattack". Washington D.C.: Associated Press (AP). Archived from the original on 9 September 2022. Retrieved 21 November 2024.
  31. ^ "U.S. Imposes Sanctions On Iranian Ministry Over Cyberattack On Nato Ally Albania". Radio Free Europe/Radio Liberty. 9 September 2022. Archived from the original on 9 September 2022. Retrieved 21 November 2024.
  32. ^ Schaffer, Aaron; Starks, Tim (12 September 2022). "Campaign cybersecurity might be the weakest link in the midterms". The Washington Post. Archived from the original on 12 September 2022. Retrieved 21 November 2024.
  33. ^ a b "Shqipëria sërish cak i sulmeve kibernetike" (in Albanian). Radio Evropa e Lirë. 10 September 2022. Archived from the original on 10 September 2022. Retrieved 21 November 2024.
  34. ^ a b Ruci, Ani (10 September 2022). "Tiranë: Tjetër sulm kibernetik nga Irani ndaj sistemit Tims". Deutsche Welle (DW). Archived from the original on 10 September 2022. Retrieved 21 November 2024.
  35. ^ "Shqipëri, sulmi kibernetik ndaj Tims, rikthehet sistemi në disa pika kufitare" (in Albanian). Zëri i Amerikës. 11 September 2022. Archived from the original on 11 September 2022. Retrieved 21 November 2024.
  36. ^ a b "Shqipëri, sulmi kibernetik ndaj Tims, rikthehet sistemi në disa pika kufitare" (in Albanian). Zëri i Amerikës. 11 September 2022. Archived from the original on 11 September 2022. Retrieved 21 November 2024.
  37. ^ a b "Sulmi kibernetik i Iranit ndaj sistemit Tims, Prokuroria e Tiranës nis hetimet! Në një dosje me sulmin e korrikut në faqet qeveritare". Shqiptarja (in Albanian). 12 September 2022. Archived from the original on 12 September 2022. Retrieved 21 November 2024.
  38. ^ "Confrontation, Unilateral Action, Interference in States' Internal Affairs Must Yield to Dialogue, Cooperation, Speakers Stress at Annual General Assembly Debate". United Nations (UN). 24 September 2022. Archived from the original on 24 September 2022. Retrieved 21 November 2024.
  39. ^ a b c "Sulmi kibernetik i Iranit në Shqipëri, publikohen një listë që pretendohet të jetë informacioni i sistemit 'Memex! Policia: S'janë dëmtuar të dhëna sensitive, po hetojmë". Shqiptarja (in Albanian). 3 October 2022. Archived from the original on 3 October 2022. Retrieved 21 November 2024.
  40. ^ "Thyhet sistemi 'MEMEX', hakerat publikojnë të dhënat nga sistemi i policisë për të dyshuarit shqiptarë" (in Albanian). Tirana: ABC News. 3 October 2022. Archived from the original on 9 October 2022. Retrieved 21 November 2024.
  41. ^ a b c Delia-Kaci, Jetmira (26 December 2023). "Kuvendi i Shqipërisë thotë se cak i sulmit kibernetik ishte fshirja e të dhënave" (in Albanian). Radio Evropa e Lirë. Archived from the original on 26 December 2023. Retrieved 22 November 2024.
  42. ^ Semini, Llazar (26 December 2023). "A cyberattack targets Albanian Parliament's data system, halting its work". Tirana: Associated Press (AP). Archived from the original on 27 December 2023. Retrieved 22 November 2024.
  43. ^ Ruci, Ani (26 December 2023). "Tiranë: Hakerë iranianë sulm kibernetik ndaj Parlamentit" (in Albanian). Deutsche Welle (DW). Archived from the original on 26 December 2023. Retrieved 22 November 2024.
  44. ^ Paganini, Pierluigi (29 December 2023). "Cyber attacks hit the Assembly of the Republic of Albania and telecom company One Albania". Security Affairs. Archived from the original on 29 December 2023. Retrieved 22 November 2024.
  45. ^ Si, Nen (25 December 2023). "'Homeland Justice' hacks telephone company in Albania: We got the data". Euronews Albania. Archived from the original on 22 November 2024. Retrieved 22 November 2024.
  46. ^ a b "Hakerat e 'Homeland Justice' godasin 'One Albania', zhdukin të dhënat e shqiptarëve" (in Albanian). Albeu. 25 December 2023. Archived from the original on 25 December 2023. Retrieved 22 November 2024.
  47. ^ "Cyberattack on Instat: Some systems affected, but not Census data" (in Albanian). Euronews Albania. 1 February 2024. Archived from the original on 22 November 2024. Retrieved 22 November 2024.
  48. ^ "Deklaratë Zyrtare" (in Albanian). National Authority for Electronic Certification and Cyber Security (AKCESK). 1 February 2024. Archived from the original on 18 June 2024. Retrieved 22 November 2024.
  49. ^ a b c d "Hakerat iranianë sulmojnë faqen zyrtare të webit të Istat! Insituti i Statistikave: Nuk cenohen të dhënat e Censit". Shqiptarja (in Albanian). 1 February 2024. Archived from the original on 1 February 2024. Retrieved 22 November 2024.
  50. ^ a b c "Deklaratë" (in Albanian). National Authority for Electronic Certification and Cyber Security (AKCESK). 13 February 2024. Archived from the original on 18 June 2024. Retrieved 22 November 2024.
  51. ^ Cuka, Fatjon (14 February 2024). "Akcesk reagon për sulmin kiberenetik ndaj Institutit të Statistikave të Shqipërisë" (in Albanian). Tirana: Anadolu Agency (AA). Archived from the original on 22 November 2024. Retrieved 22 November 2024.
  52. ^ Bogdani, Nensi (13 February 2024). "Akcesk thotë se sulmi sulmi kibernetik ndaj Instat u neutralizua". Reporter (in Albanian). Archived from the original on 13 February 2024. Retrieved 22 November 2024.
  53. ^ a b c d e "Microsoft investigates Iranian attacks against the Albanian government". Microsoft. 8 September 2022. Archived from the original on 20 October 2022. Retrieved 22 November 2024.
  54. ^ Higgins, Andrew (25 February 2023). "A Nato Minnow Reels From Cyberattacks Linked to Iran". The New York Times. Tirana. Archived from the original on 25 February 2023. Retrieved 22 November 2024.
  55. ^ Jovanoviq, Natallija (13 September 2022). "Çfarë dihet për grupin që qëndron pas sulmeve kibernetike në Shqipëri?" (in Albanian). Radio Evropa e Lirë. Archived from the original on 13 September 2022. Retrieved 22 November 2024.
  56. ^ "Iranian State Actors Conduct Cyber Operations Against the Government of Albania". Cybersecurity and Infrastructure Security Agency (CISA). 22 September 2022. Archived from the original on 15 March 2023. Retrieved 22 November 2024.
  57. ^ a b c "Statement by the North Atlantic Council concerning the malicious cyber activities against Albania". North Atlantic Treaty Organization (NATO). 8 September 2022. Archived from the original on 8 September 2022. Retrieved 22 November 2024.
  58. ^ Szucs, Agnes (8 September 2022). "Nato condemns cyberattack on Albania". Brussels: Anadolu Agency (AA). Archived from the original on 8 September 2022. Retrieved 22 November 2024.
  59. ^ "Nato reaffirms support for Albania following cyber attacks". North Atlantic Treaty Organization (NATO). 21 September 2022. Archived from the original on 22 September 2022. Retrieved 22 November 2024.
  60. ^ a b "L'Italia condanna gli attacchi informatici che l'Albania ha subito nel mese di luglio" (in Italian). Tirana: Embassy of Italy. 8 September 2022. Archived from the original on 29 November 2023. Retrieved 22 November 2024.
  61. ^ a b "Presidentja Osmani dënon sulmin kibernetik në Shqipëri" (in Albanian). President of Kosovo. 7 September 2022. Archived from the original on 6 December 2023. Retrieved 22 November 2024.
  62. ^ a b c d "Statement by Government Plenipotentiary for Cybersecurity concerning the malicious cyber activities against Albania". Government of Poland. 12 September 2022. Archived from the original on 12 September 2022. Retrieved 22 November 2024.
  63. ^ a b "Uk condemns Iran for reckless cyber attack against Albania". Government of the United Kingdom. 7 September 2022. Archived from the original on 7 September 2022. Retrieved 22 November 2024.
  64. ^ a b c "Statement by Nsc Spokesperson Adrienne Watson on Iran's Cyberattack against Albania". Washington D.C.: The White House. 7 September 2022. Archived from the original on 7 September 2022. Retrieved 22 November 2024.