Albania cuts diplomatic ties with Iran over July cyberattack

Sep 7, 2022, 5:01 AM | Updated: Sep 12, 2022, 4:05 am
A policeman stands guard outside the Iranian Embassy in Tirana, Albania, Wednesday Sept. 7, 2022. A...

A policeman stands guard outside the Iranian Embassy in Tirana, Albania, Wednesday Sept. 7, 2022. Albania cut diplomatic ties with Iran and expelled the country's embassy staff over a major cyberattack nearly two months ago that was allegedly carried out by Tehran on Albanian government websites, the prime minister said Wednesday. (AP Photo/Franc Zhurda)

(AP Photo/Franc Zhurda)

TIRANA, Albania (AP) — Albania cut diplomatic ties with Iran and expelled the country’s embassy staff over a major cyberattack nearly two months ago that was allegedly carried out by Tehran on Albanian government websites, the prime minister said Wednesday.

The move by NATO member Albania was the first known case of a country cutting diplomatic relations over a cyberattack.

The White House vowed unspecified retaliation Wednesday against Iran for what it called “a troubling precedent for cyberspace.”

In a statement, the White House said it has had experts on the ground for weeks helping Albania and had concluded Iran was behind the “reckless and irresponsible” attack and subsequent hack-and-leak operation.

The government’s decision was formally delivered to the Iranian Embassy in Tirana, the capital, in an official note, Prime Minister Edi Rama said. All embassy staff, including diplomatic and security personnel, were ordered to leave Albania within 24 hours.

On July 15, a cyberattack temporarily shut down numerous Albanian government digital services and websites.

Rama said an investigation determined that the cyberattack wasn’t carried out by individuals or independent groups, calling it “state aggression.”

“The deep investigation put at our disposal undeniable evidence that the cyberattack against our country was orchestrated and sponsored by the Islamic Republic of Iran which had involved four groups for the attack on Albania,” Rama said in a video statement.

Iran on Wednesday condemned the diplomats’ expulsion, calling the action ill-considered and short-sighted, according to Iranian state TV.

In a statement, the Iranian Foreign Ministry denied Tehran was behind any cyberattack on Albanian government websites, adding that it’s Iran which is a target of such attacks on its critical infrastructure.

Tirana said it was working with Microsoft and the FBI in an investigation into the cyberattack.

Mandiant, a leading U.S. cybersecurity firm, expressed “moderate confidence” last month that the attackers were acting in support of Tehran’s anti-dissident efforts.

A group calling itself “HomeLand Justice” claimed credit for the cyberattack that used ransomware to scramble data. Ransomware is best known for its use in for-profit criminal extortion, but is being increasingly wielded for political ends, particularly by Iran.

The claim by “HomeLand Justice” came on a Telegram channel in which documents purported to be Albanian residence permits of members of the Iranian opposition group Mujahedeen-e-Khalq group — best known as MEK — were posted, along with video of the ransomware being activated. The channel alleged corruption in the Albanian government and used hashtags including #Manez.

Albania, a NATO member since 2009, shelters about 3,000 Iranian MEK dissidents who live at Ashraf 3 camp in Manez, which is 30 kilometers (19 miles) west of Tirana.

“This activity poses an active threat to public and private organizations in other NATO member states,” Mandiant said. “As negotiations surrounding the Iran nuclear deal continue to stall, this activity indicates Iran may feel less restraint in conducting cyber network attack operations going forward.”

At the time, the Albanian government said the hackers’ methods was identical to attacks last year in other NATO countries, including Germany, Lithuania, the Netherlands and Belgium.

Rama on Wednesday accused Tehran of recruiting one of the most notorious international cyberattack groups that was involved in similar attacks on Israel, Saudi Arabia, United Arab Emirates, Jordan, Kuwait and Cyprus. He said Tirana had shared the data and the investigation results with strategic partners and NATO countries.

The Biden administration said it supported the move by Albania to cut ties with Tehran.

“The United States strongly condemns Iran’s cyberattack,” National Security Council spokesperson Adrienne Watson said in a statement. “We join in Prime Minister Rama’s call for Iran to be held accountable for this unprecedented cyber incident.”

“The United States will take further action to hold Iran accountable for actions that threaten the security of a U.S. ally and set a troubling precedent for cyberspace,” Watson said.

Albanian Foreign Minister Olta Xhacka said Tirana “communicated closely with our partners, at NATO and the European Union, and also at the bilateral level, and asked for their support in Albania’s decision-making and, no doubt, for the future to address such kind of threats the best way possible.”

“The aggressiveness of the attack, the level of attack and moreover the fact that it was a fully unprovoked attack left no space for any other decision,” Xhacka said.

Mandiant Vice President John Hultquist told The Associated Press that the attacks on Albania and an earlier one on Montenegro show how “critical government systems in NATO countries are vulnerable and under attack.”

“The attack on Albania is a reminder that while the most aggressive Iranian cyber activity is generally focused in the Middle East region, it is by no means limited to it,” Hultquist said. “Iran will carry out disruptive and destructive cyberattacks as well as complex information operations globally.”

In July, MEK had planned to hold the Free Iran World Summit at the Manez camp with U.S. lawmakers among the invitees. The meeting was canceled “for security reasons and due to terrorist threats and conspiracies.”

In two separate instances in 2020 and 2018, Tirana expelled four Iranian diplomats for “threatening national security.”

—–

Jon Gambrell in Dubai, United Arab Emirates, and Frank Bajak in Boston, contributed to this report.

—–

Follow Llazar Semini at https://twitter.com/lsemini

Copyright © The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.

AP

This undated photo provided by the Merced County Sheriff's Office shows Alberto Salgado, who was ar...
Associated Press

Brother of suspect in California family’s killing arrested

SAN FRANCISCO (AP) — The younger brother of a man suspected in the kidnapping and killings of an 8-month-old baby, her parents and an uncle, was arrested on suspicion he helped his brother destroy evidence, authorities said Friday. Alberto Salgado, 41, was arrested late Thursday and accused of criminal conspiracy, accessory, and destroying evidence, the […]
13 hours ago
German Foreign Minister Annalena Baerbock, right, and her counterpart from Pakistan, Bilawal Bhutto...
Associated Press

Germany wants climate losses put on agenda at UN talks

BERLIN (AP) — Germany wants the huge economic damage resulting from global warming to be discussed at this year’s United Nations climate talks, Germany’s foreign minister said Friday. Vulnerable countries have long demanded that big polluters be held accountable for the effects that their greenhouse gas emissions are having around the world, including the destruction […]
13 hours ago
Associated Press

Texas officer fired after shooting hamburger-eating teenager

A Texas police officer who shot and wounded a teenager who had been sitting in his car eating a hamburger has been fired, police said. San Antonio Officer James Brennand was fired after shooting Erik Cantu, 17, on Oct. 2 in a fast food restaurant parking lot, police training commander Alyssa Campos said in a […]
13 hours ago
Associated Press

Closing prices for crude oil, gold and other commodities

Benchmark U.S. crude oil for November delivery rose $4.19 to $92.64 a barrel Friday. Brent crude for December delivery rose $3.50 to $97.92 a barrel. Wholesale gasoline for November delivery rose 5 cents to $2.73 a gallon. November heating oil rose 16 cents to $4.02 a gallon. November natural gas fell 22 cents to $6.75 […]
13 hours ago
FILE - A Uvalde police officer watches as family and friends of those killed and injured in the sch...
Associated Press

Uvalde schools suspend entire police force after outrage

AUSTIN, Texas (AP) — Uvalde’s school district on Friday pulled its embattled campus police force off the job following a wave of new outrage over the hiring of a former state trooper who was part of the hesitant law enforcement response during the May shooting at Robb Elementary School that left 21 dead. School leaders […]
13 hours ago
Snowbird William Wellema talks about his frustration at not being allowed on to the island to surve...
Associated Press

As search goes on, Floridians await OK to survey Ian’s wrath

FORT MYERS BEACH, Fla. (AP) — William Wellema has been living under a bridge for four days, waiting to get to Fort Myers Beach on Florida’s Estero Island to see if his vacation home survived Hurricane Ian. On Friday, he was beyond frustrated as he continued to await permission to drive across. “They’re saying it’s […]
13 hours ago

Sponsored Articles

...
Day & Night Air Conditioning, Heating and Plumbing

Here are 4 signs the HVAC unit needs to be replaced

Pool renovations and kitchen upgrades may seem enticing, but at the forefront of these investments arguably should be what residents use the most. In a state where summertime is sweltering, access to a functioning HVAC unit can be critical.
...
Day & Night Air Conditioning, Heating and Plumbing

Ways to prevent clogged drains and what to do if you’re too late

While there are a variety of ways to prevent clogged drains, it's equally as important to know what to do when you're already too late.
...
Mayo Clinic Orthopedics and Sports Medicine

Why your student-athlete’s physical should be conducted by a sports medicine specialist

Dr. Anastasi from Mayo Clinic Orthopedics and Sports Medicine in Tempe answers some of the most common questions.
Albania cuts diplomatic ties with Iran over July cyberattack