Operations & Intelligence Failures — 2026-03-20

DOJ Disrupts Iranian MOIS Cyber-Enabled Psychological Operations on U.S. Soil

DOJ seized four domains operated by Iran's MOIS through the Handala Hack persona, which was used to claim credit for cyberattacks, leak stolen data, and issue death threats against journalists and Iranian dissidents in the United States. The operation targeted the same MOIS-linked actors behind the Stryker medical device attack. This represents an escalation in Iranian intelligence operations on American soil during the active conflict.

Analysis
The 03-19 IC brief reported FBI seized Handala hacktivist sites after the 80,000-device Stryker wipe. DOJ's domain seizure now targets the MOIS operational infrastructure behind those attacks -- an escalation from defensive response to offensive disruption of Iranian intelligence operations on U.S. soil.

View in full brief →

UNCLASSIFIED // OPEN SOURCE