A cyberattack that last month temporarily shut down numerous Albanian government digital services and Web sites was likely the work of pro-Iranian hackers seeking to disrupt a planned conference by an Iranian opposition group in Albania, a leading US cybersecurity firm said on Thursday.
In its report, Virginia-based Mandiant expressed “moderate confidence” that the attackers were acting in support of Tehran’s efforts to persecute dissident, saying its findings were based on the attack’s timing, the content of a social media channel used to claim responsibility and similarities in software code used with malware long used to target Persian and Arabic speakers.
The conference, scheduled for July 23 and 24 by the Iranian dissident group Mujahedeen-e-Khalq (MEK), was canceled following warnings from local authorities of a possible terrorist threat.
About 3,000 Iranian dissidents from the group live at Ashraf 3 camp in Manez, 30km west of Albania’s capital, Tirana.
The Free Iran World Summit was to have been held at the camp with US lawmakers among the invitees.
A group calling itself “HomeLand Justice” claimed credit for the cyberattack, which used ransomware to scramble data.
Ransomware is best known for its use in for-profit criminal extortion, but is being increasingly wielded for political ends, particularly by Iran.
The claim came on a Telegram channel that also posted documents purported to be Albanian residence permits of MEK members.
A video of the ransomware being activated was also posted.
The channel accused the Albanian government of corruption, using a hashtag referring to the dissident group.
The government said the hackers’ method was identical with attacks last year in other NATO states including Germany, Lithuania, the Netherlands and Belgium.
“This activity poses an active threat to public and private organizations in other NATO member states,” Mandiant said. “As negotiations surrounding the Iran nuclear deal continue to stall, this activity indicates Iran may feel less restraint in conducting cybernetwork attack operations going forward.”
The report came shortly after Iran, the US and the EU announced a resumption of talks to revive a 2015 deal that limited Tehran’s nuclear program before Washington walked away from it under former US president Donald Trump.
On Thursday, the White House said that time is getting “very short” for Iran to accept a return to the international deal.
Additional reporting by AFP
The death of a former head of China’s one-child policy has been met not by tributes, but by castigation of the abandoned policy on social media this week. State media praised Peng Peiyun (彭珮雲), former head of China’s National Family Planning Commission from 1988 to 1998, as “an outstanding leader” in her work related to women and children. The reaction on Chinese social media to Peng’s death in Beijing on Sunday, just shy of her 96th birthday, was less positive. “Those children who were lost, naked, are waiting for you over there” in the afterlife, one person posted on China’s Sina Weibo platform. China’s
‘NO COUNTRY BUMPKIN’: The judge rejected arguments that former prime minister Najib Razak was an unwitting victim, saying Najib took steps to protect his position Imprisoned former Malaysian prime minister Najib Razak was yesterday convicted, following a corruption trial tied to multibillion-dollar looting of the 1Malaysia Development Berhad (1MDB) state investment fund. The nation’s high court found Najib, 72, guilty on four counts of abuse of power and 21 charges of money laundering related to more than US$700 million channeled into his personal bank accounts from the 1MDB fund. Najib denied any wrongdoing, and maintained the funds were a political donation from Saudi Arabia and that he had been misled by rogue financiers led by businessman Low Taek Jho. Low, thought to be the scandal’s mastermind, remains
Australian Prime Minister Anthony Albanese yesterday announced plans for a national bravery award to recognize civilians and first responders who confronted “the worst of evil” during an anti-Semitic terror attack that left 15 dead and has cast a heavy shadow over the nation’s holiday season. Albanese said he plans to establish a special honors system for those who placed themselves in harm’s way to help during the attack on a beachside Hanukkah celebration, like Ahmed al-Ahmed, a Syrian-Australian Muslim who disarmed one of the assailants before being wounded himself. Sajid Akram, who was killed by police during the Dec. 14 attack, and
VISHNU VANDALS: A Cambodian official accused Thailand of destroying a statue in a disputed border area, with video showing the Hindu structure being torn down The Thai military said ceasefire talks with Cambodia, set to begin yesterday, are expected to conclude with a meeting of the countries’ defense ministers on Saturday, as the two sides seek to end weeks of deadly clashes. The talks started at 4pm in Thailand’s Chanthaburi Province, which borders Cambodia. The Thai Ministry of Defense outlined several demands to be discussed ahead of the bilateral meeting of the General Border Committee (GBC) on Saturday. If secretariat-level discussions fail to reach agreement on key technical frameworks such as troop deployments, the Thai side would not proceed with the GBC meeting or sign any agreement on