Who is Handala, the hacktivist group US ties to Iranian intelligence?
Subscribe for as low as
$2/week
to access this story and all reporting.
By entering your email, you agree to receive AL-MONITOR's daily newsletter and occasional marketing messages.
Why AL-MONITOR?
AL-MONITOR is an award-winning media outlet covering the Middle East, valued for its independence, diversity and analysis. It is read widely by US, international and Middle East decision makers at the highest levels, as well as by media, thought and business leaders and academia.
Read by
Live news & notifications
Follow over 100 expert journalists based across the region and get notified in real time of breaking stories and exclusives. *Expanded coverage on Energy & Defense sectors.
Premier analysis of the Middle East
Access the sharpest and most diverse regional minds giving you all the angles on regional trends.
Live events & video
Priority access to roundtables, summits and other events alongside AL-MONITOR's global community of regional influencers.
Specialized Newsletters
Get timely reporting on key countries and sectors with up to 10 daily and weekly newsletters straight to your inbox.
Big, exclusive interviews
Follow conversations with the region's biggest names in politics and business.
AL-MONITOR archives since 2012
Access a repository of over a decade's worth of regional coverage, insights and trends.
Subscribe for unlimited access
By becoming an AL-MONITOR subscriber, you drive our team’s rigorous and independent journalism spanning the Middle East.
A group allegedly linked to Iranian intelligence claimed responsibility for an attack on an anti-regime news outlet on Tuesday, days after reportedly hacking the FBI director’s personal account. Tehran is increasingly turning to cyber operations amid the ongoing war with the US and Israel.
What happened: The Handala Hack Team said it had “fully” hacked and taken control of the IranWire news outlet’s website and social media accounts. Handala claimed to have obtained correspondence and information on affiliates of IranWire, describing the news site as a “hostile outlet” supported by the CIA.
Handala posted images of its logo over IranWire’s X, Instagram, Facebook and Telegram pages on Tuesday, though the accounts were operating normally later in the day. The IranWire website had read “We are currently performing scheduled maintenance” for several days predating Handala's hack claim.
🚨 IranWire Targeted in Cyberattack Claims
The threat actor group Handala claims to have compromised both: • IranWire’s Instagram account • IranWire’s website infrastructure
Screenshots shared by the group allegedly show backend/admin panel access.
IranWire, which is based outside of Iran and reports critically on the Islamic Republic, issued a statement later on Tuesday denying it had been hacked, saying the images that were circulated are related to a service disruption.
You're reading a free AL-MONITOR Original
Want more like this?
AL-MONITOR All-Access gives you unlimited access to all our journalism, the full Daily Briefing, exclusive interviews, premium newsletters, and live events — for less than $2/week.