SHISH: Online Services Being Exploited by Cyber Espionage

As Albania aims to provide all online services, a warning comes from State Service Intelligence (SHISH). In the latest published report, SHISH states that the space of online services is being used for cyber espionage, malicious influence activities as well as for cybercrime. It is estimated that the level of cyber threats is increasing and they have become a global threat. 

Malicious threat actors will continue to exploit the vulnerabilities of electronic storage, administration, and communication platforms to provide access to sensitive information that affects the public and is used for intelligence purposes. 

Critical physical and electronic infrastructures remain targets of cyber threats by opposing state actors and related entities. Online service space is being used for cyber espionage, malicious influence activities as well as cybercrime. Opposing state actors are investing in expanding the scale and power of dangerous cyber-programs, treating them as a foreign policy tool, in the context of rivalry with the Western factor, but also as hybrid activities aimed at pressure, rather than easing sanctions, western versus them. 

The intelligence services of non-friendly countries conduct cyber espionage operations to gather information in response to the priorities of their domestic Cyber ??and external security policies. SHISH is committed to strengthening its defense and analytical capabilities against cyber threats. 

The Service has dynamically followed the situations on cyber threats to the infrastructure of SHISH and public and private institutions of the Republic of Albania and has managed to identify the target of the threat, the type and nature of the attack. 

During 2021, SHISH has managed to successfully face a large number of cyber threats on public perimeters. All these threats have been neutralized in the active reconnaissance phase, where the target and the source of the threat have been identified. State and non-state actors of non-Western countries, as well as related entities constitute the main source of threats, accompanied by permanent, increased activity and active reconnaissance. 

The target of attacks during 2021 have been for the most part databases, VoIP infrastructures as well as ensuring the stability of penetration through C2 servers (Command and Control). 

Cyberspace is also being used for impact information operations also because the advantage and dimension of impact is greater than their cost and risk of exposure.