The Face of Destruction: Inside Void Manticore’s ‘Handala Hack’ AI-Assisted Wiping Operations

Handala Hack (Void Manticore), an MOIS‑linked Iranian APT, is carrying out destructive hack-and-leak and wiping campaigns against Israel and U.S. targets; researchers observed AI-assisted PowerShell wiping scripts, NetBird tunneling for persistence, RDP-based lateral movement and manual deletion of VMs/files, and disk encryption used to render systems inaccessible—mitigation advice includes enforcing MFA, restricting RDP, and maintaining offline immutable backups.