Cybersecurity & Privacy — 2026-03-21

DOJ Seizes Four MOIS Domains; Handala Responds With Defiance After Stryker Attack

The Justice Department seized four domains used by Iran's MOIS for psychological operations and transnational repression. The action followed Handala's March 11 attack on Stryker, which wiped over 200,000 devices across 79 countries and destroyed 12 petabytes of corporate data by compromising a Microsoft Intune administrative account. US officials described it as 'likely the most significant wartime cyberattack against the US in history.' Handala's X account was subsequently banned.

Analysis
Prior INTSUM covered the Stryker attack's scope (200K devices wiped). Russian-language sources add a critical detail: 12 petabytes of data destroyed—the largest known data destruction in a single wartime cyber operation. DOJ domain seizure represents the enforcement response.

View in full brief →

UNCLASSIFIED // OPEN SOURCE