Iran Expands Handala Brand to Physical Threats

Insikt Group attributes expansion of Iran’s MOIS “Handala” brand to encompass coordinated cyber, physical, and influence personas—Handala Hack Team, Handala Popular Resistance Front (HPRF), VIPEmployment, MOISIRAN, and Brave Israel—used to solicit and amplify espionage, sabotage, arson, and hack-and-leak/wiper operations against US and Israeli targets; the report documents active Telegram-based recruitment and bot infrastructure, provides IoCs (domains and Telegram accounts), and recommends mitigation measures for cyber and physical defenses.