Cybersecurity & Privacy — 2026-03-19

Krebs: Handala Wiper Group Linked to Iran's MOIS and Void Manticore Actor

Brian Krebs reports Handala is assessed as an online persona maintained by Void Manticore, a threat actor affiliated with Iran's Ministry of Intelligence and Security (MOIS). The group targeted Stryker specifically over its 2019 acquisition of Israeli firm OrthoSpace, calling it a 'Zionist-rooted corporation.' The MOIS link elevates the incident from hacktivism to state-directed cyber operations.

Analysis
The IC Brief reported Palo Alto Unit 42's Iran cyber escalation threat brief. Krebs' confirmation of the Handala-MOIS/Void Manticore link elevates this from hacktivism to state-directed cyber operations, consistent with Unit 42's assessment of escalating Iranian cyber campaign.