216.73.217.22

Iran Expands Handala Brand to Physical Threats

· Published 02/06/2026 14:38 · Modified 03/06/2026 09:34

Export JSON

Essential information

Published
02/06/2026 14:38
Modified
03/06/2026 09:34
Tags
2026-06-02 bibi wiper coordinated inauthentic behavior cryptocurrency payments handala hack team hprf israeli targeting physical operations proxy recruitment telegram recruitment void manticore wiper attacks
Related entities
1 intrusion sets (apt), 20 techniques (mitre), 1 malware, 13 others

Description

Iran's Ministry of Intelligence has broadened its Handala brand beyond cyber operations to include physical threats and influence campaigns targeting US and Israeli interests. The expansion encompasses multiple personas: Handala Popular Resistance Front claiming physical attacks inside Israel, VIPEmployment recruiting proxies globally for espionage and sabotage, and MOISIRAN conducting surveillance operations. These entities engage in coordinated amplification across platforms, soliciting individuals to conduct attacks for financial rewards. The consolidation creates a multi-domain threat combining hacktivist activities with , espionage recruitment, and influence campaigns. This approach leverages 's recognition to amplify recruitment efforts while increasing risks to law enforcement, military, intelligence personnel, and critical infrastructure across targeted regions.

External references