DOJ Dismantles Iranian Cyber-Terror Network: “Handala Hack” Domains Seized

the staff of the Ridgewood blog

Washington DC, In a significant blow to state-sponsored cyber warfare, the U.S. Department of Justice has officially seized four key domains used by the Islamic Republic of Iran’s Ministry of Intelligence and Security (MOIS). These websites were central to a sophisticated “playbook” of psychological operations (PsyOps), transnational repression, and destructive malware attacks targeting U.S. infrastructure and international dissidents.

The Takedown: Four Pillars of Iranian Cyber-Aggression

Following a court-authorized warrant, the FBI successfully neutralized the following domains:

1. Handala-hack[.]to

2. Handala-Redwanted[.]to

3. Justicehomeland[.]org

4. Karmabelow80[.]org

According to officials, these sites weren’t just hosting propaganda—they were active hubs for “faketivist” operations. The MOIS used these platforms to leak stolen data, claim credit for destructive cyberattacks, and incite real-world violence against journalists and political dissidents.

Inside the “Handala Hack” Playbook

The investigation revealed a chilling escalation in Iran’s digital tactics following the onset of the U.S.-Iran conflict in late February 2026. The MOIS didn’t just hack; they terrorized.

• Targeting Critical Infrastructure: In March 2026, the Handala Hack persona used these domains to claim responsibility for a destructive malware attack on a U.S.-based multinational medical technology firm.

• Doxing and Death Threats: The group published the private information (PII) of nearly 190 individuals associated with the IDF and sent explicit death threats to Iranian dissidents living in the U.S.

• Cartel Collusion Claims: In a disturbing development, the FBI intercepted emails where the hackers claimed to be partnering with the Jalisco New Generation Cartel (CJNG), offering bounties of $250,000 for the assassination of regime critics.

“Terrorist propaganda online can incite real-world violence,” stated Attorney General Pamela Bondi. “This network of Iranian-backed sites will no longer broadcast anti-American hate.”

Transnational Repression: Silencing the Diaspora

The seizure of Justicehomeland[.]org and Karmabelow80[.]org also highlights Iran’s long-term efforts to punish nations that support its critics. These domains were previously used to leak stolen documents from the Albanian government in retaliation for their support of Iranian dissident groups.

By removing these domains, the DOJ and FBI have disrupted the MOIS’s ability to amplify its threats and pressure independent reporting within the Iranian diaspora.

A $10 Million Reward for Information

The fight against state-sponsored cyber-terrorism is ongoing. The Department of State’s Rewards for Justice program is currently offering up to $10 million for information leading to the identification of any foreign-government-linked individual engaging in malicious cyber activities against U.S. critical infrastructure.

Follow the Ridgewood blog has a brand-new new X account, we tweet good sh$t
https://twitter.com/TRBNJNews
https://truthsocial.com/@theridgewoodblog
https://mewe.com/jamesfoytlin.74/posts
#news #follow #media #trending #viral #newsupdate #currentaffairs #BergenCountyNews #NJBreakingNews #NJHeadlines #NJTopStories

• Tags: #CyberSecurity #NationalSecurity #FBINews #IranHacking #HandalaHack #TechNews #DataPrivacy