HomeLand Justice
Campaign · ATTACK:enterprise:C0038
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:C0038",
"title": "HomeLand Justice",
"type": "Campaign",
"source_url": "https://attack.mitre.org/campaigns/C0038",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "campaign--7e21077d-2589-43a7-a5f9-490061289526",
"external_id": "C0038",
"domain": "enterprise",
"created": "2024-08-06T20:52:19.002Z",
"modified": "2026-07-31T21:13:10.649Z",
"version": "1.1",
"aliases": [
"HomeLand Justice"
],
"tactics": [
],
"source_references": [
{
"source_name": "CISA Iran Albanian Attacks September 2022",
"url": "https://www.cisa.gov/news-events/cybersecurity-advisories/aa22-264a"
},
{
"source_name": "Mandiant ROADSWEEP August 2022",
"url": "https://cloud.google.com/blog/topics/threat-intelligence/likely-iranian-threat-actor-conducts-politically-motivated-disruptive-activity-against/"
},
{
"source_name": "Microsoft Albanian Government Attacks September 2022",
"url": "https://www.microsoft.com/en-us/security/blog/2022/09/08/microsoft-investigates-iranian-attacks-against-the-albanian-government/"
}
]
}Explicit source assertions (33)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:C0038 → attributed-to → ATTACK:enterprise:G1055
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0dd04e16-ad64-4b7d-af2f-12ad644cfe3e
ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1486
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0fbd1a64-07c1-4b5f-bb3a-2de93a9088a9
CISA Iran Albanian Attacks September 2022 · Mandiant ROADSWEEP August 2022 · Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1561.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2aa6a9d6-57a0-490e-97d0-79d12119ec21
CISA Iran Albanian Attacks September 2022 · Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2b07bb81-4843-423c-a29c-251169a845ce
CISA Iran Albanian Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1046
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--32d0c1aa-b936-40d4-932e-7d4f42736382
CISA Iran Albanian Attacks September 2022 · Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:S0357
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--373f6c02-459f-4d19-b8a6-6ae02e9738f7
Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1098.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--39d843d6-a08f-4167-9b4a-25e36533b4be
Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:S1149
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--3a3f586e-9444-489b-871d-616dfb0a5bc9
Mandiant ROADSWEEP August 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:S1151
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4454f45e-8dda-4914-9689-83ade769523d
CISA Iran Albanian Attacks September 2022 · Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1134.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--45a8a431-8465-4f6e-8258-817d919a6a52
Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1078.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--47e6ea9a-cb80-49ba-8a72-bad2eafa7cd8
Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1114.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4fdff650-7872-4991-9667-bbe9f88f8085
CISA Iran Albanian Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1190
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5c1f3cc7-902d-4af1-9910-d149b76ae4a0
CISA Iran Albanian Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1021.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5ca15f16-b87d-4373-8668-524431ceb35a
CISA Iran Albanian Attacks September 2022 · Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1588.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--651781ce-8062-444c-8078-0cda57adcd51
CISA Iran Albanian Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:S0002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6e79a5b7-c12b-4f4c-a7a2-40141389e40e
CISA Iran Albanian Attacks September 2022 · Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1685
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8ae32d7b-b307-4b95-a49b-ea1fd1902e97
Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1003.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9ead9e4e-20c7-4c39-86c2-adcea93e04b8
CISA Iran Albanian Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1059.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--9f940bca-0593-4d1d-865d-89f29df73ea8
CISA Iran Albanian Attacks September 2022 · Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1036.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a15d732e-b911-437b-8693-df38c1732780
CISA Iran Albanian Attacks September 2022 · Mandiant ROADSWEEP August 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1505.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a75d7482-b44c-4fbf-88ab-17839c27a099
CISA Iran Albanian Attacks September 2022 · Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1021.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--a9880e35-afe0-4537-a45d-3f63103b69b5
CISA Iran Albanian Attacks September 2022 · Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1570
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--af2fe9ce-36bf-487c-bb71-7190aed28c55
CISA Iran Albanian Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1047
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c5517f93-efd9-4fa5-83a4-8403ac85f831
Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1059.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--d559a4f6-cb7f-49db-b95e-42748f3f6c63
CISA Iran Albanian Attacks September 2022 · Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dde8ddd4-f56f-4186-828e-dd971b6a3770
Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:S0095
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e21b903a-6bb3-4250-a32a-fe882ff31f3c
CISA Iran Albanian Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1087.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e8fae453-8493-4393-92ce-01975f1c1694
CISA Iran Albanian Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1588.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ed07a5d3-757c-4665-969b-c0a1bb9ec881
CISA Iran Albanian Attacks September 2022 · Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:S1150
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ef54b620-1e4b-41cf-afbd-9486292170e7
Mandiant ROADSWEEP August 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:S0364
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f6007218-9dc2-476d-b08a-8e3cd5e8e0b3
CISA Iran Albanian Attacks September 2022 · Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1685.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fab61ab8-acbb-41ce-ae5f-1356443b16bb
Microsoft Albanian Government Attacks September 2022ATTACK:enterprise:C0038 → uses → ATTACK:enterprise:T1078
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ffa43025-87c2-47a7-a4cf-b04010986b4f
CISA Iran Albanian Attacks September 2022