Pro-Iranian Hacker Group Targeting Albania with No-Justice Wiper Malware

ClearSky and other sources report a destructive campaign by an Iranian "Homeland Justice" group that used a Windows wiper called No-Justice (NACL.exe) to remove MBR boot signatures and render systems unbootable across multiple Albanian organizations (ONE Albania, Eagle Mobile, Air Albania, and the Albanian parliament). The campaign used a PowerShell-based propagator (enabling WinRM), legitimate tools (Plink, RevSocks, Windows 2000 resource kit) for lateral movement and persistence, and is part of a broader trend of pro-Iranian hacktivist groups conducting psychological warfare and destructive operations.