Hacker Group Handala Announces Pause in U.S. Cyberattacks

The group Handala has announced a pause in cyberattacks targeting the United States, citing orders from leadership within what it calls the "Resistance Axis." It stated it will continue operations against Israel. The FBI assesses Handala is a front for Iran's Ministry of Intelligence and Security.

Announcement and Rationale

In a post on the Telegram messaging platform, the group Handala announced it is postponing "overt confrontation" with the United States.

• The group stated this decision was made "according to the orders from the highest leadership of the Resistance Axis."
• Multiple sources reported the announcement appears linked to a ceasefire agreement, with some specifying it involves the U.S. administration.
• Handala claimed its capability remains, stating, "the world already knows our capability to penetrate and strike at the very core of American infrastructure."

Continued Operations Against Israel

The announcement specified that cyber activities against Israel will not cease.

• Handala stated, "Handala, at full force, continues its cyber operations against the infrastructure of the Zionist regime."
• The group added, "The cyber war did not begin with the military conflict, and it will not end with any military ceasefire."

Attributed Activities and Official Assessment

Handala has previously claimed responsibility for several cyber incidents.

• The group has taken credit for a cyberattack on Michigan-based medical technology company Stryker.
• It has also claimed to have leaked old emails from a Gmail account belonging to FBI Director Kash Patel.

The U.S. Federal Bureau of Investigation (FBI) has provided an assessment of the group.

• The FBI has identified Handala as a front for Iran's Ministry of Intelligence and Security.
• The agency has characterized the group's public statements and claimed activities as "psychological operations."