FBI takes down leak sites tied to Iran’s Ministry of Intelligence and Security

The FBI and Justice Department say Iran’s Ministry of Intelligence and Security (MOIS), operating under aliases including “Handala,” used four seized domains to publish data stolen from governments, dissidents, and companies. One Handala-linked attack leveraged Microsoft Intune’s device-wipe feature to erase data on over 200,000 Stryker devices, disrupting hospital communications and prompting a $10 million U.S. reward for information. #Handala #Stryker

Keypoints

The DOJ seized four domains tied to Iran’s MOIS that hosted stolen data and propaganda.
Handala claimed responsibility for a cyberattack on medical device maker Stryker and posted stolen information.
Attackers exploited Microsoft Intune’s native device-wipe function to destroy data on more than 200,000 devices globally.
The Stryker incident disrupted hospital communications in Maryland, forcing clinicians to revert to radio and verbal coordination.
Authorities linked Handala to earlier hacks of Albania and theft from the Sanzer community and offered $10 million for information on the perpetrators.