The Iran-backed hacker collective Handala announced on Wednesday that they had identified and surveilled a senior Mossad agent coordinating Israeli intelligence operations inside Iran. The group threatened to release what they described as shocking sensitive information about Israeli intelligence activities, marking the latest escalation in cyber warfare between Iran and Israel.
Handala identified the alleged agent as Mehrdad Rahimi, claiming he served as a high-ranking guiding officer within Mossad's Iran desk. According to the group's statement, Rahimi was responsible for organizing and directing networks behind recent unrest inside Iran, coordinating networks of operatives, managing logistical infrastructure for protests, and channeling clandestine financial support to anti-government figures.
The hacker group claimed they had compromised Rahimi's secure phone and communications, mapping the identities of what they called riot network participants. They also released what they described as surveillance footage from outside his residence, asserting that while Rahimi believed he was operating as a secure strategist directing clandestine cells, he was in fact under total surveillance for months.
In a dramatic escalation of their claims, Handala subsequently announced they had identified 600 individuals they alleged were Mossad-linked agents operating inside Iran. The group stated that those named had attempted to turn peaceful demonstrations into broader insecurity. The hacker collective labeled their initial revelations as Episode One and promised multiple additional installments throughout the week.
Handala has previously targeted several high-profile Israeli figures. The group claimed responsibility for breaching devices belonging to former Prime Minister Naftali Bennett and his former chief of staff Tzachi Braverman. More recently, they announced they had hacked the phone of former Interior Minister Ayelet Shaked, claiming to have obtained approximately 50 videos and publishing what they described as private photos from her device.
In their statement, Handala declared that while they hold the ability to disrupt every aspect of Israeli society in a very short time, their true intention is not destruction but to expose what they called the darkness and deception perpetuated by Israeli leadership. The group operates under a name referencing a famous Palestinian cartoon character symbolizing resistance.
Cybersecurity experts have noted that at least some of Handala's prior claims appear to be credible. Researcher Kevin Beaumont confirmed in analysis that certain previous breaches attributed to the group may be authentic. Israeli intelligence agencies have not publicly commented on the specific allegations, though the claims come amid ongoing tensions between Israel and Iran and widespread protests inside the Islamic Republic.
Comments