Actors Insights|Latest update30/07/2026

Homeland Justice

Named by self givenSuspected state sponsor: Islamic Republic of Iran

Homeland Justice is an Iranian hacktivist persona linked to the IRGC responsible for destructive cyberattacks against Albania in 2022. The group targeted Albanian government infrastructure in retaliation for Albania hosting the Mojahedin-e Khalq (MEK) opposition group, deploying wiper malware disguised as ransomware to disrupt government services and border control systems. Albania attributed the attacks to Iran and expelled Iranian diplomats — a significant geopolitical consequence. Microsoft tracked the underlying operators as DEV-0842 before formal attribution to IRGC and MOIS-linked actors.

First Seen:Jan 2012
Last Seen:Mar 2026
Indexed Reports:7
Public IOCs:117
Cluster: Homeland JusticeMisp: HomeLand Justice
also known as:
Homeland Justice (self given)

Targeted Regions

Albania
AL
Albania
Albania
Jan 2012 ~ Aug 2022
Jan 2012 ~ Aug 2022
Jan 2012 ~ Aug 2022
Jan 2012 ~ Aug 2022
Jan 2012 ~ Aug 2022
Jan 2012 ~ Aug 2022
Jan 2012 ~ Aug 2022
Jan 2012 ~ Aug 2022
Jan 2012 ~ Aug 2022
Jan 2012 ~ Aug 2022
Jan 2012 ~ Aug 2022
Jan 2012 ~ Aug 2022
Jan 2012 ~ Aug 2022
Jan 2012 ~ Aug 2022
Jan 2012 ~ Aug 2022
May 2021 ~ Sep 2022
May 2021 ~ Sep 2022
Jan 2012 ~ Aug 2022
May 2021 ~ Sep 2022
May 2021 ~ Sep 2022
Jun 2022 ~ Dec 2023
Jul 2022 ~ Jan 2024
Jan 2012 ~ Aug 2022
May 2021 ~ Sep 2022
May 2021 ~ Sep 2022
Jun 2022 ~ Dec 2023
Jul 2022 ~ Jan 2024
May 2021 ~ Sep 2022
May 2021 ~ Sep 2022
Jun 2022 ~ Dec 2023
Jul 2022 ~ Jan 2024
Jun 2022 ~ Dec 2023
Jul 2022 ~ Jan 2024
Argentina
AR
Argentina
Argentina
Aug 2025 ~ Aug 2025
Austria
AT
Austria
Austria
Aug 2025 ~ Aug 2025
Bahrain
BH
Bahrain
Bahrain
Aug 2025 ~ Aug 2025
Bangladesh
BD
Bangladesh
Bangladesh
Aug 2025 ~ Aug 2025
Brazil
BR
Brazil
Brazil
Aug 2025 ~ Aug 2025
Canada
CA
Canada
Canada
Aug 2025 ~ Aug 2025
Colombia
CO
Colombia
Colombia
Aug 2025 ~ Aug 2025
Ethiopia
ET
Ethiopia
Ethiopia
Aug 2025 ~ Aug 2025
France
FR
France
France
Aug 2025 ~ Aug 2025
Germany
DE
Germany
Germany
Aug 2025 ~ Aug 2025
Hungary
HU
Hungary
Hungary
Aug 2025 ~ Aug 2025
Israel
IL
Israel
Israel
Aug 2025 ~ Aug 2025
Italy
IT
Italy
Italy
Aug 2025 ~ Aug 2025
Japan
JP
Japan
Japan
Aug 2025 ~ Aug 2025
Jordan
JO
Jordan
Jordan
Aug 2025 ~ Aug 2025
Malawi
MW
Malawi
Malawi
Aug 2025 ~ Aug 2025
Mongolia
MN
Mongolia
Mongolia
Aug 2025 ~ Aug 2025
Netherlands
NL
Netherlands
Netherlands
Aug 2025 ~ Aug 2025
Nigeria
NG
Nigeria
Nigeria
Aug 2025 ~ Aug 2025
Oman
OM
Oman
Oman
Aug 2025 ~ Aug 2025
Peru
PE
Peru
Peru
Aug 2025 ~ Aug 2025
Qatar
QA
Qatar
Qatar
Aug 2025 ~ Aug 2025
Romania
RO
Romania
Romania
Aug 2025 ~ Aug 2025
Rwanda
RW
Rwanda
Rwanda
Aug 2025 ~ Aug 2025
South Korea
KR
South Korea
South Korea
Aug 2025 ~ Aug 2025
Spain
ES
Spain
Spain
Aug 2025 ~ Aug 2025
Sweden
SE
Sweden
Sweden
Aug 2025 ~ Aug 2025
Thailand
TH
Thailand
Thailand
Aug 2025 ~ Aug 2025
United Arab Emirates
AE
United Arab Emirates
United Arab Emirates
Aug 2025 ~ Aug 2025
Jan 2012Jun 2026

Targeted Sectors

Government Agencies and ServicesDissidentJournalistsPoliticalAerospaceTelecommunication

Recent Indexed Reports

  1. Public
    Iran MOIS Cyber Actors Deploy Telegram C2 Malware Against Global Dissidents and Journalists
  2. Public
    Homeland Justice Phishing Operation Hits Diplomatic and Government Sectors Globally
  3. Public
    Homeland Justice Wiper Attack Targets Albanian Telecoms and Government
see more

Disclaimer: We are working on indexing and analyzing relevant data and this process is not fully completed yet. Therefore, displayed details and statistics may will change in the future.