The ransomware claim alleges that the threat actor Handala, associated with Arghavan Shams and Nadia Tariqi, leaked documents revealing the identities of Iran International staff, exposing their roles in promoting LGBTQ issues inside Iran. The impacted country is GB.
Incident Details
- Victim: Leaked Documents Reveal Identities of Iran International Staff
- Country: GB
- Actor: handala
- Source: http://vmjfieomxhnfjba57sd6jjws2ogvowjgxhhfglsikqvvrnrajbmpxqqd.onion/?p=459
- Discovered: 2025-07-09 13:26:31.848387
- Published: 2025-07-09 13:25:59.080067
Information
- Leaked documents reveal the identities of Iran International staff.
- The attack is attributed to the actor handala.
- Arghavan Shams is a journalist promoting LGBTQ-related issues within Iran and works with Iran International network.
- Nadia Tariqi has been a key figure behind the scenes at Iran International, influencing editorial content for years.

Disclaimer: This post is based on public claims made by the ransomware group "handala". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.