Overview
- The Justice Department and FBI took down Justicehomeland.org, Handala-Hack.to, Karmabelow80.org, and Handala-Redwanted.to, which now display federal seizure notices.
- Court filings attribute the sites to Iran’s Ministry of Intelligence and Security, describing a 'faketivist' campaign that claimed hacks, leaked stolen data, and urged killings of journalists, dissidents, and Israelis.
- Investigators say Handala used the network to post sensitive personal data for roughly 190 individuals tied to the Israeli government or IDF, accompanied by threats.
- The operation claimed a March 11 destructive malware attack on a U.S. medical technology firm, widely reported as Stryker, and linked emails offered a $250,000 bounty while invoking the CJNG cartel.
- FBI Baltimore and DOJ national security prosecutors are pursuing the case, the State Department posted a reward of up to $10 million, and Handala has begun reestablishing online channels after the seizures.