Iranian hackers, Handala, claim to compromise FBI Director Kash Patel’s personal data

Summary

Iranian government-connected hacking group Handala claimed Friday to have compromised FBI Director Kash Patel's personal email and data, releasing what it claimed was his email cache in retaliation for U.S. domain seizures and a $10M reward offer. The FBI confirmed awareness of the targeting but stated the compromised data was historical and contained no government information. Handala, which has previously claimed attacks on organizations like medical device maker Stryker, frequently targets U.S. government officials.

Full text

Iranian hackers claimed Friday to have compromised the personal data of FBI Director Kash Patel, and the bureau confirmed that it knew of the targeting of Patel’s personal email. The government-connected hacking group, Handala, previously claimed credit for hacking medical device maker Stryker, a boast that threat researchers considered credible. “All personal and confidential email of Kash Patel, including emails, conversations, documents, and even classified files, is now available for public download,” Handala — also known as Handala Hack — said. The group said it did so in response to the FBI seizing its domains and the U.S. government offering a $10 million reward for information on members of the group. The FBI noted that Handala frequently targets government officials, and challenged elements of Handala’s claims, such as that it had brought the FBI’s systems “to its knees,” rather than Patel’s own email. “The FBI is aware of malicious actors targeting Director Patel’s personal email information, and we have taken all necessary steps to mitigate potential risks associated with this activity,” the FBI said in response to questions from CyberScoop. “The information in question is historical in nature and involves no government information.” The activist group Distributed Denial of Secrets published what it said was Patel’s email cache. The FBI pointed to the State Department’s reward program seeking information on members of Handala. “Consistent with President Trump’s Cyber Strategy for America, the FBI will continue to pursue the actors responsible, support victims, and share actionable intelligence in defense of networks,” it said. “We encourage anyone who experiences a cyber breach, or has information related to malicious cyber activity, to contact their local FBI field office.” Share Facebook LinkedIn Twitter Copy Link

Indicators of Compromise

• malware — Handala