Facebook Iran-linked Handala Group Targets Israeli Polling Stations
Article Content
- •Handala claims responsibility for placing bouquets at Israeli polling sites.
- •The action is part of a broader campaign linked to Iranian cyber operations.
- •No immediate threat from the bouquets was indicated, but more packages may follow.
Handala, a hacking group linked to Iran, claimed responsibility for placing bouquets containing 'sensitive items' at polling sites in Israel during a significant election. The group's Telegram channel showcased images and videos of these bouquets, which included messages directed at Israeli officials, specifically targeting Gadi Eisenkot, a candidate opposing Prime Minister Netanyahu. Handala's actions appear to be part of a broader campaign of cyber operations, with previous attacks attributed to the group, including a hack of FBI director Kash Patel's personal email. No immediate threat from the bouquets was indicated, but Handala warned of more packages to come. The group has been active in various cyber incidents globally, including a notable attack on medical technology company Stryker. The FBI has previously issued warnings regarding Handala's activities and offered a reward for information leading to the identification of its members.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track handala and Stryker in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What items were included in the bouquets?
Is there a threat from these bouquets?
What is Handala's history of cyber attacks?
Continue Reading
PHP2Shell Attack Chain Compromises 25 Servers in U.S. Government Environment Dream reported a PHP2Shell attack chain that compromised 25 servers, including those in a U.S. government-affiliated environment. The investigation revealed that an exposed firewall management interface allowed attackers to access internal identity infrastructure. The attack utilized PHP2Shell (CVE-2026-109618 and…