At a Glance Attribute Details Malware Family HEAVYGRAM (associated with CRUDEEXCLUDE) Threat Actor Handala Hack (suspected persona of Void Manticore / MOIS) Target Victims Iranian dissidents, Farsi-language journalists, and academic targets Delivery Vector Social engineering, malicious scripts, and trojanized installers Key Capabilities Screen recording, Telegram session theft, remote command execution Source Group-IB Threat Intelligence Executive Summary Security researchers discovered 29 new samples of the HEAVYGRAM malware targeting dissidents and reporters.

Recently, the Handala Hack Team breached the personal Google email of Kash Patel and published private photographs, old resumes, and other personal dossiers. The incident—linked to Iranian state proxies and followed by U.S. domain seizures and a $10 million reward—highlights how open-source tools can amplify intelligence from seemingly benign accounts. #HandalaHackTeam...

Iran-linked threat actors operating under the Handala Hack persona breached FBI director Kash Patel’s personal email and published historical photos and documents online. The group, assessed as tied to Iran’s MOIS and known for destructive wiper operations including the Stryker attack, leverages compromised VPNs, Microsoft Intune abuse, RDP lateral movement, Telegram...

The Handala Hack Team published highly sensitive personal data for 28 Lockheed Martin engineers stationed in Israel, including names, phone numbers, addresses, passport details, and family information. The group issued a 48-hour ultimatum threatening missile strikes and physical attacks while claiming "Operation Lockheed Martin," though there is no evidence of a...

Handala Hack Team went back online hours after the FBI announced the seizure of clearnet domains tied to Iran-linked operators accused of issuing threats and conducting "name and shame" campaigns. The group announced a new domain on Telegram while Stryker confirmed a contained attack on its Microsoft environment with restoration efforts...

Une intrusion au sommet de l’antiterrorisme américain Vingt-quatre heures après avoir revendiqué une intrusion dans les systèmes du FBI, le groupe Handala Hack...

Eine wohl iranische Hackergruppe hat private E-Mails und Fotos von FBI-Direktor Kash Patel veröffentlicht. Der Inhalt des Materials mag auf den ersten Blick unverfänglich wirken – die politische Botschaft des Angriffs ist es nicht. Kira Kramer | Frankfurter Allgemeine

The new FBI chief’s private inbox wasn’t on a government server — it was on whatever email service he used in 2010. Iran’s Handala Hack Team turned that decade-old account into a geopolitical trophy.

Handala Hack, a pro-Palestinian hacktivist group, claims to have breached the Viber messaging service. Researchers say Viber is easier to hack compared to similar apps.