Published • loading... • Updated
FBI seizes Iranian-linked hackers’ websites following cyberattack
FBI seized two domains used by Iran-linked group Handala after they wiped data from about 80,000 devices in a cyberattack on Stryker, disrupting global operations.
- On Wednesday, the Federal Bureau of Investigation seized two domains tied to the Iranian-linked hacktivist group Handala, replacing the sites with Justice Department and FBI seizure banners under a District Court for the District of Maryland warrant.
- Earlier this month, Stryker said it confirmed the hack on March 11, and Handala claimed responsibility last week, citing retaliation for the Shajarah Tayyebeh elementary school air strike that killed at least 175 people.
- Investigators found the breach involved hackers using Microsoft Intune to issue wipe commands that factory-reset about 80,000 devices, while Microsoft and the Cybersecurity and Infrastructure Security Agency urged firms to harden Intune setups.
- The seizure notice states the United States government took control of the domains to disrupt ongoing malicious cyber operations and aid investigations, though Handala is preparing replacement sites.
- Cybersecurity researchers note Handala has ties to Iran's Ministry of Intelligence and Security and has been active since October 7, 2023; analysts warn takedowns may be temporary as it builds new resilient infrastructure.
Insights by Ground AI
21 Articles
21 Articles
FBI seizes Iranian-linked hackers’ websites following cyberattack
The FBI on Thursday seized two domains tied to the Iranian-linked hacker group Handala, which took credit for the cyberattack last week against a global medical technology company. The two websites were replaced with FBI seizure banners that said the domains had been “used to conduct, facilitate, or support malicious cyber activities on behalf of, or in coordination with, a foreign state actor.” The seizures come just days after the hackers clai…
CISA urges companies to secure Microsoft Intune systems after hackers mass-wipe Stryker devices
The U.S. cybersecurity agency urged companies to prevent access to systems used for remotely managing their fleets of employee devices after hackers broke into a major U.S. medical tech giant and remotely wiped thousands of phones and computers.
·United States
Read Full ArticleCoverage Details
Total News Sources21
Leaning Left2Leaning Right0Center7Last UpdatedBias Distribution78% Center
Bias Distribution
- 78% of the sources are Center
78% Center
L 22%
C 78%
Factuality
To view factuality data please Upgrade to Premium









