HomeLand Justice

First seen
2021-05-01 00:00:00
Origin
IR
Primary motivation
espionage
Sophistication
intermediate
Resource level
government
Actor type
nation-state
Profile updated
2026-07-07 12:11:34

Targeted industries: government-and-public-sector technology-and-telecommunications

Targeted regions: country_code:al

Context

HomeLand Justice is an Iranian state-sponsored cyber threat group that has been active since at least May 2021. They have targeted various organizations, including a well-known telecommunication company and the Albanian Parliament. The group engaged in information operations and messaging campaigns to amplify the impact of their attacks.

Reports & references

  • picussecurity.com — Cisa Alert Aa22 264A Iranian Homeland Justice Apt Groups Ttp (report)
  • attackiq.com — Attack Graph Response To Us Cert Alert Aa22 264A Iranian State Actors Conduct Cyber Operations Against The Government Of Albania (report)
  • Mandiant — Likely Iranian Threat Actor Conducts Politically Motivated Disruptive Activity Against (report)

Attributed from

  • HomeLand Justice (campaign)

External references