Iranian MOIS-Linked Hackers Behind Destructive Attacks on Albania and Israel
May 20, 2024
Cyber Attack / Threat Intelligence
An Iranian threat actor affiliated with the Ministry of Intelligence and Security (MOIS) has been attributed as behind destructive wiping attacks targeting Albania and Israel under the personas Homeland Justice and Karma, respectively. Cybersecurity firm Check Point is tracking the activity under the moniker Void Manticore , which is also referred to as Storm-0842 (formerly DEV-0842) by Microsoft. "There are clear overlaps between the targets of Void Manticore and Scarred Manticore , with indications of systematic hand off of targets between those two groups when deciding to conduct destructive activities against existing victims of Scarred Manticore," the company said in a report published today. The threat actor is known for its disruptive cyber attacks against Albania since July 2022 under the name Homeland Justice that involve the use of bespoke wiper malware called Cl Wiper and No-Justice (aka LowEraser). Similar wiper malware attacks have also targeted Wi