defensive-guidance

1 article

sort: new top best

bug-bounty480 google297 xss277 microsoft249 facebook211 rce159 apple150 exploit136 bragging-post102 account-takeover98 malware94 csrf84 cve79 privilege-escalation74 authentication-bypass65 stored-xss65 writeup61 reflected-xss57 browser54 react53 ssrf51 phishing50 dos50 input-validation49 cloudflare49 access-control49 cross-site-scripting48 node46 aws46 smart-contract45 docker45 sql-injection45 ethereum44 defi43 web-security43 web-application42 supply-chain42 oauth41 web339 burp-suite36 lfi34 vulnerability-disclosure34 idor34 html-injection33 smart-contract-vulnerability32 race-condition32 clickjacking31 reverse-engineering31 information-disclosure30 csp-bypass30

0 6/10

CTI Research: Handala Hack Group (aka Handala Hack Team)

threat-intel

Comprehensive CTI research on Handala Hack Group (linked to Iranian MOIS via Void Manticore cluster), a politically-motivated hack-and-leak threat actor targeting Israeli organizations through phishing, social engineering, and wiper malware, combining technical compromise with information operations for amplified impact. The report provides cluster-level attribution convergence across five vendors, TTPs mapping, IOCs, and SOC-ready defensive playbooks including wiper-resilience and incident communications guidance.

threat-intelligence threat-actor iran-linked mois hack-and-leak data-exfiltration wiper-malware phishing social-engineering intrusion influence-operations iocs attribution defensive-guidance detection-engineering incident-response

Handala Hack Group Handala Hack Team Void Manticore Storm-0842 Storm-842 BANISHED KITTEN Dune COBALT MYSTIQUE MOIS Check Point Microsoft Sophos CrowdStrike Recorded Future Andrey Pautov

infosecwriteups.com · Andrey Pautov · 4 hours ago · details