
In addition to targeting infrastructure, the Iranian hackers were blamed for leaking documents from the government in Tirana and personal information on certain Albanians. MuddyWater conducted a sustained cyberattack against Turkish government entities late last year, it said.

The Treasury singled out one active Iranian group, dubbed “MuddyWater,” which it said has conducted cyber campaigns since 2018, exploiting foreign network vulnerabilities to steal sensitive data and deploy ransomware. Iran has disregarded “norms of responsible peacetime state behavior in cyberspace,” Secretary of State Antony Blinken added in a statement. Analysts say the operation was intended to punish Albania for supporting an Iranian dissident group based in the country, known as the Mujahedin-e Khalq (MEK). The July attacks temporarily disrupted government websites and other public services. Iran’s mission to the United Nations in New York did not immediately respond to a request for comment. The ministry was already designated under US sanctions. “We will not tolerate Iran’s increasingly aggressive cyber activities targeting the United States or our allies and partners,” he said. “Iran’s cyberattack against Albania disregards norms of responsible peacetime State behavior in cyberspace,” Brian Nelson, Treasury’s under secretary for terrorism and financial intelligence, said in a statement. The destructive malware deployed was also previously used by a “known Iranian actor,” it said. It said the attackers were observed operating out of Iran, used tools previously used by known Iranian attackers and had previously targeted “other sectors and countries” consistent with Iranian interests. Secretary Antony Blinken September 9, 2022 or our allies’ interests, infrastructure, or services. We won’t tolerate cyberattacks targeting the U.S. We are designating Iran’s Ministry of Intelligence and Security and its Minister for engaging in cyber-enabled activities against the U.S. Microsoft, which assisted Albania in investigating the cyberattack, said in a blog post Thursday that it was moderately confident the hackers belong to a group that has been publicly linked to Iran’s Ministry of Intelligence and Security.
The Albanian government has accused Iran of carrying out the July 15 attack, which temporarily shut down numerous Albanian government digital services and websites. It was the first known case of a country cutting diplomatic relations over a cyberattack.

The Treasury Department’s Office of Foreign Assets Control designated Iran’s Ministry of Intelligence and Security and Esmail Khatib, who heads the ministry, for what it said were cyber-related activities against the US and its allies.Īlbania, a NATO member, cut diplomatic ties with Iran and expelled its embassy staff this week over the cyberattack. WASHINGTON: The US government on Friday imposed sanctions on Iran’s intelligence agency and its leadership in response to malicious cyberattacks on Albanian government computer systems in July.
