The Prime Minister of Albania released a video statement announcing the move and ordering Iranian embassy workers to leave within 24 hours.
On Wednesday, Prime Minister Edi Rama of Albania released a video statement announcing that the country has cut diplomatic ties with Iran after a cyberattack launched by the Islamic Republic in July. The Albanian leader also expelled Iranian diplomats and embassy staff, ordering them to leave the country within 24 hours.
Rama alluded to the Albanian government's investigation, which revealed "indisputable evidence" that the Islamic Republic of Iran was behind the cyberattack in July that targeted Albania's digital systems, public services, state records, and electronic communications, Bleeping Computer reported. Rama called it an "extreme response" that caused "chaos and insecurity" in Albania.
Who Was Behind the July Cyberattack on Albania
The cyberattack that took place against the government of Albania was carried out by a group called "HomeLand Justice," which claimed responsibility and used ransomware to wipe out data, ABC News reported. Ransomware is often used in for-profit criminal extortion by bad actors seeking political gains.
On a Telegram channel, "HomeLand Justice" took credit and posted documents that were believed to be Albanian residence permits of members of the Mujahedeen-e-Khalq or MEK, an Iranian opposition group. A video was also posted on the Telegram channel announcing that the ransomware was being activated. The bad actors accused the Albanian government of corruption and used the hashtag #Manez.
Tensions between Iran and Albania began in 2014 after Albania accepted 3,000 members of the exiled Iranian MEK, who now live at Ashraf 3 camp in Manez, located 30 kilometers away from Tirana, Albania's capital.
US Comes to Albania's Defense
Albania is a NATO country and the US has come to its defense following the July cyberattack carried out by bad actors from Iran. In a statement, the White House National Security Council pledged to "take further action to hold Iran accountable" for the cyberattack, Reuters reported.
John Hultquist, Vice President of Intelligence of American cybersecurity firm Mandiant, remarked that Albania's dissolving of diplomatic ties with Iran is the "strongest public response to a cyberattack" that the company has ever seen. Recently, a cyberattack was also launched against the European country of Montenegro, another NATO member.
The US government has also been working with private sector partners to assist in the investigation into the attack against Albania and to help the NATO country recover from the ransomware attack from Iran. National Security Council spokesperson Adrienne Watson expressed the US' support for Albania for cutting diplomatic ties with Iran, calling for Iran's accountability for threatening Albanian national security.
Albanian Foreign Minister Olta Xhacka said that they are already working with its partners within NATO and the European Union to address the threat posed by Iran. US President Joe Biden said in July 2021 that cyberattacks against governments and institutions may lead to a "real shooting war" that could disrupt real-world operations. His statements echoed NATO's views that said cyberattacks are comparable to "armed attacks."
