Operations & Intelligence Failures — 2026-03-20

DOJ Seizes Four Domains Linked to Iran's MOIS Psychological Operations Campaign

The Justice Department seized four domains operated by actors tied to Iran's MOIS, used for psychological operations including false claims of cyberattacks, leaking stolen data, and issuing death threats against journalists, dissidents, and Israelis. The operation directly responded to the Handala group's destructive wiper attack on medical device maker Stryker, which exploited compromised Microsoft Intune credentials.

Analysis
Prior IC brief covered this URL. Including for continuity: FBI domain seizure operationalizes the MOIS attribution from the Stryker attack, converting a defensive cyber incident into an offensive counterintelligence action.

View in full brief →

UNCLASSIFIED // OPEN SOURCE