Police1 Iran-Linked Handala Hackers Threaten 2026 FIFA World Cup Security
Article Content
- •Handala claims to have accessed FBI drones used for World Cup security.
- •The U.S. State Department is offering a $10 million reward for information on Handala.
- •SITE Intelligence Group has questioned the authenticity of Handala's claims.
The Iran-linked hacking group Handala claims to have breached FBI-operated drones used for security at the 2026 FIFA World Cup, which began on June 11, 2026. They assert access to sensitive data, including images and information from counterterrorism operations, and issued threats against participating teams. The U.S. State Department has announced a $10 million reward for information leading to the identification of Handala members. SITE Intelligence Group has raised doubts about the veracity of Handala's claims, noting that some evidence presented was misleading. The group has previously been linked to attacks on U.S. entities, including a breach of FBI Director Kash Patel's email. The FBI is deploying drones to secure World Cup venues while unauthorized drone flights will be prohibited. The situation reflects heightened tensions between the U.S. and Iran following military actions earlier in the year.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (16)
Following this threat?
Track handala and FBI in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
China-linked Hackers Exploit PHP2Shell to Compromise 25 Firewalls A China-linked threat actor has exploited vulnerabilities in PHP2Shell (CVE-2026-109618, CVE-2026-109619) and the Fragnesia privilege escalation bug (CVE-2026-46300) to gain root access to 25 firewalls, including those in an U.S. The attackers identified vulnerable systems using the FOFA search engine and executed…
Brotli Decoder Vulnerability Patched Across Multiple Linux Distributions A vulnerability, CVE-2026-111497, affecting the Brotli decoder has been patched in various Linux distributions, including Fedora 44 and Oracle Linux 10. The flaw allows for an out-of-bounds write, which could potentially enable attackers to execute arbitrary code. The vulnerability was published on October 22, 2026…