As cited
Copy frozen at (site build).
threat intel
Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords
Security researchers linked the Iran-affiliated persona Handala Hack to HEAVYGRAM, a Telegram-based backdoor capable of remote command execution, credential theft, and data exfiltration. The malware operates alongside CRUDEEXCLUDE, a Delphi-based utility, to enable surveillance and system reconnaissance.
Why it matters: Organizations and individuals targeted by Iranian threat actors face credential and data theft risks; practitioners should monitor for HEAVYGRAM indicators of compromise (IOCs) and suspicious Telegram-based command and control activity.
- Source published
- First seen by Cybersecurity Tracker
Source attribution
Correction
Correction recorded as of .
threat intel
Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords
Security researchers linked the Iran-affiliated persona Handala Hack to HEAVYGRAM, a Telegram-based backdoor capable of remote command execution, credential theft, and data exfiltration. The malware operates alongside CRUDEEXCLUDE, a Delphi-based utility, to enable surveillance and system reconnaissance.
Why it matters: Organizations and individuals targeted by Iranian threat actors face credential and data theft risks; practitioners should monitor for HEAVYGRAM indicators of compromise (IOCs) and suspicious Telegram-based command and control activity.
- Source published
- First seen by Cybersecurity Tracker