FBI warns of Handala hackers using Telegram in malware attacks

The FBI warns that Iranian state-linked groups (Handala, Homeland Justice, and Karma Below) are using Telegram as C2 for Windows malware campaigns targeting journalists, dissidents, and opposition groups to exfiltrate screenshots and files; authorities seized four domains used in these operations and highlighted prior destructive incidents such as Handala's attack on Stryker.