Threats & Adversaries · APT / Espionage

Iranian Handala breaches FBI Director's Gmail; targets journalists

FBI says Iran-linked groups Handala and Homeland Justice use Telegram as command-and-control for malware targeting journalists, activists, and dissidents. The malware aims at Windows devices to steal files and capture screenshots, intensifying state-linked espionage against media and opposition. Handala also published files claimed from an alleged personal Gmail account of Kash Patel; reporters verified some leaked emails as authentic.

4 sources · Mar 27

Timeline

Sources

Part of the PlainSec briefing for 2026-03-27

Every edition of this story: Iranian Handala breaches FBI Director's Gmail; targets journalists

More from today