FBI Warns Handala Hackers Using Telegram for Malware Distribution

The FBI issued a warning about Iranian-linked Handala hackers using Telegram to distribute malware, marking continued evolution of the group's tactics after the DOJ/FBI seized four of its domains last week. Handala quickly restored its infrastructure. The group previously claimed responsibility for wiping 200,000+ Stryker corporate devices on March 11 via a compromised Microsoft Intune administrator account. The FBI warning signals that Handala remains operationally active despite the domain seizures.