“The actors maintained continuous network access for approximately a year, periodically accessing and exfiltrating email content,” it adds. From May to June 2022, “Iranian state cyber actors conducted lateral movements, network reconnaissance, and credential harvesting from Albanian government networks.” it continues.