Handala — Hacktivist Profile
Handala is an Iranian-aligned hacktivist group since late 2023 conducting destructive attacks against Israeli organizations. Named after Palestinian cartoon character. Hack-and-leak, wiper deployments, and data theft targeting Israeli defense and government. Suspected Iranian state ties.Also tracked as
Handala Hack, Handala Team
IntelFusions coverage (10)
- Iran hid a spy backdoor in fake KeePass and Telegram apps 2026-09-17 · Nation-State
- Qilin lists Stryker four months after the medtech giant ruled out ransomware 2026-07-26 · Ransomware
- Iran's Hackers Are Shifting From Spying to Sabotaging US Infrastructure 2026-06-09 · Nation-State
- From Hacktivist to State Proxy: How Handala Became Iran's Most Prominent Cyber Persona 2026-03-03 · Nation-State
- Handala Claims Saudi Aramco Breach Amid Escalating Iranian Cyber Operations 2026-03-03 · Cyber Incidents
- Handala Claims Breach of Clalit, Israel's Largest Healthcare Network 2026-02-26 · Cyber Incidents
- Operation Bibi Gate: Handala Breaches Telegram Accounts of Senior Israeli Officials 2026-02-16 · Nation-State
- Hacktivism-as-a-Service: How Keymous+ Monetized Disruption Through the EliteStress DDoS Platform 2026-02-16 · Cyber Incidents
- Handala Claims 2.1 Terabyte Breach of Israeli National Police 2026-02-16 · Cyber Incidents
- Handala Deploys Wiper Malware Disguised as CrowdStrike Fix During Global Outage 2026-02-16 · Cyber Incidents
Tools & malware
- Handala Wiper Wiper
Recent claimed victims
- St. Joseph County 2026-04-08
- PSK WIND 2026-04-08
- IranWire 2026-03-31
- Good Food Store 2026-03-30
- North Country Business Products 2026-03-30
- Lockheed Martin 2026-03-26
- Mossad 2026-03-17
- Stryker Corporation 2026-03-16
- Hebrew University of Jerusalem 2026-03-13
- Verifone 2026-03-11
- Stryker Corporation 2026-03-11
- Jerusalem Water Supply Facilities 2026-03-07
- Israel Defense Forces (Farsi media account) 2026-03-06
- Atlas Insurances Ltd 2026-03-05
- Israel Institute for National Security Studies (INSS) 2026-03-04
- Saudi Aramco 2026-03-03
- Aramco 2026-03-03
- Sharjah National Oil Corporation 2026-03-03
- Israel Opportunity Energy 2026-03-02
- Clalit 2026-02-25
- i24NEWS 2026-01-21
- Plonter 2025-12-11
- Amos Spacecom 2025-09-27
- Iran International 2025-07-09
- Iran International 2025-07-08
Vendor research
- Dark Web Profile: Handala Hacktivist Group SOCRadar
- Handala: Iranian-Aligned Hacktivist Operations Against Israel ClearSky