Operations & Intelligence Failures — 2026-03-20

DOJ Seizes Four Domains Linked to Iran's MOIS Psychological Operations and Stryker Cyberattack

DOJ seized four domains—Justicehomeland.org, Handala-Hack.to, Karmabelow80.org, and Handala-Redwanted.to—used by MOIS for psychological operations including claiming cyberattacks, posting stolen data, and issuing death threats against journalists and dissidents. The domains were linked to Handala Hack's March 11 destructive malware attack on Stryker Corporation and a claimed theft of 851 GB from a Hasidic Jewish community. The seizure reveals MOIS is running coordinated cyber-kinetic operations that combine hacking with targeted assassination campaigns.

Analysis
The 1213 brief reported Iran retains 'high-end offensive cyber capability' even as IRGC/MOIS are degraded kinetically. Domain seizure disrupts current infrastructure but MOIS has demonstrated rapid reconstitution in past operations.

View in full brief →

UNCLASSIFIED // OPEN SOURCE