This post is also available in:
עברית (Hebrew)
On Tuesday, July 8th, Independent news outlet Iran International was allegedly hacked in a large-scale cyberattack by Handala, a pro-Iranian hacktivist group. The group, which has been active since 2014, claimed full control over the outlet’s systems, including personal information of its journalists, media contacts, and over 70,000 supporters.
According to a report by Cybernews, Handala detailed the scale of the breach in a post on its dark web site and Telegram channel. The hackers claim to have compromised the media outlet’s internal communications, server infrastructure, and sensitive data, including identities, bank records, and personal details of both staff and readers. Handala further threatened to release stolen data, including classified communications and identities of individuals the group accuses of working with foreign intelligence agencies.
According to the hackers, they also gained access to a secure communication channel used by the outlet to coordinate with “informants and foreign agents”. Handala claims to have indexed and archived sensitive information, with plans to release portions of this data soon. The group’s ultimate goal, they assert, is to expose and retaliate against what they describe as Iran International’s role as a “propaganda tool” for Western intelligence agencies, particularly Mossad.
Adding to the severity of the attack, Handala has begun targeting individual journalists. The group singled out journalist Mojtaba Pourmohsen, threatening to release personal footage unless he ceases discussing Handala on-air. Furthermore, they warned that female staff members of Iran International would be next on their radar.
This cyberattack comes at a time when tensions between Iran and the West are high, with Handala being just one of many pro-Iran hacktivist groups engaged in digital warfare. Iran International, which operates out of London and serves as a key outlet for news inside Iran, has been previously targeted but this breach marks a new escalation in the digital conflict.
While Handala’s claims remain unverified, the breach highlights the increasing use of cyberattacks by hacktivist groups to target media organizations, especially those challenging the narratives supported by hostile nation-states.
