diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json index 48654f4..8cd0b5a 100644 --- a/clusters/threat-actor.json +++ b/clusters/threat-actor.json @@ -13950,6 +13950,19 @@ }, "uuid": "993e81e8-63f4-4666-9538-4053a69287ba", "value": "Storm-1113" + }, + { + "description": "HomeLand Justice is an Iranian state-sponsored cyber threat group that has been active since at least May 2021. They have targeted various organizations, including a well-known telecommunication company and the Albanian Parliament. The group engaged in information operations and messaging campaigns to amplify the impact of their attacks.", + "meta": { + "country": "IR", + "refs": [ + "https://www.picussecurity.com/resource/blog/cisa-alert-aa22-264a-iranian-homeland-justice-apt-groups-ttp", + "https://www.attackiq.com/2022/09/23/attack-graph-response-to-us-cert-alert-aa22-264a-iranian-state-actors-conduct-cyber-operations-against-the-government-of-albania/", + "https://www.mandiant.com/resources/blog/likely-iranian-threat-actor-conducts-politically-motivated-disruptive-activity-against" + ] + }, + "uuid": "bfc538e1-9205-420a-8641-6292023ecd08", + "value": "HomeLand Justice" } ], "version": 296