Press "Enter" to skip to content

Iran-Linked Hackers Target Albanian Post in Latest Attack

Hackers suspected of links to Iran claimed on Thursday that they had infiltrated Albanian Post and made public internal staff emails – although officials insisted that the postal service was working without disruption. Homeland Security, an Iran-linked hacker outfit that has repeatedly targeted Albania, published data from the attack on Thursday morning on several Telegram pages.

“It is time to punish the sponsors of crime, Albanian Post (Posta Shqiptare),” the first message from Homeland Security read.

This was followed by several longer messages railing against Mujahedin-e-Khalq [People’s Mujahedin of Iran], an Iranian dissident group hosted by Albania. More than 2,000 members of the exiled group live at a compound in Manaz in Albania.

In the messages that accompanied the attacks, Homeland Security claimed to be composed of Albanian nationalists who oppose the Mujahedin-e-Khalq being given refuge in the country.

The emails leaked from the attack contain data on postal deliveries to individuals and other internal information.

However, Albania’s Minister for Local Governance, Ervin Demo, told journalists that postal services had not been compromised. “At the moment we are speaking, a detailed analysis is being conducted by the National Agency for Information Society and others. Postal services are continuing to operate normally,” Demo said.

The leaked emails revealed that official accounts used by Albanian Post had been targeted at least five times during 2025. Some of the leaked files include warning emails from the security system indicating that employees were being sent messages with malicious links intended to steal account passwords.

Thursday’s attack followed a hacker raid claimed by Homeland Justice on the Albanian parliament’s digital infrastructure earlier this month. It also targeted the e-Albania public services portal in 2022 and the digital infrastructure of Tirana Municipality in 2025. Albania expelled Iran’s embassy staff following the 2022 attack.

The latest attack came days after Prime Minister Edi Rama claimed that Albania now ranked ninth in the world for cybersecurity, citing a survey published by the Estonia-based National Cyber Security Index. “According to the report, Albania is recognised for its progress in strengthening the structures responsible for cybersecurity, developing national policies and strategies, as well as for improving coordination and response mechanisms to threats in the digital space,” Rama wrote on Facebook on March 19.

However, after the attack on the parliament earlier this month experts speaking to BIRN raised doubts about the efficacy of the measures Albania has taken to strengthen cybersecurity since the 2022 and 2025 attacks.