CYBERSECURITYTRACKER
TRACKING6,506 stories in this site build1,309 vulnerability news stories in this site build
Permanent story citation

Iran Expands Handala Brand to Physical Threats

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 1956

As cited

Copy frozen at (site build).

threat intel

Iran Expands Handala Brand to Physical Threats

Iran's Ministry of Intelligence has expanded the Handala brand to coordinate cyber operations, influence campaigns, and physical threat activities targeting US and Israeli interests. The organization now operates multiple personas under the Handala umbrella that solicit individuals to conduct physical attacks and espionage in exchange for payment. This consolidated branding and coordination of cyber, physical, and influence operations likely amplifies the scope and impact of Iranian intelligence activities.

Why it matters: US and Israeli government personnel, law enforcement, military, intelligence agencies, and critical infrastructure operators in energy, transportation, and research sectors face elevated recruitment and targeting risks from coordinated Handala-affiliated actors offering financial incentives for physical attacks and espionage.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary