Ransomware Group
Handala
Status: active • First seen 2023-10 • 40+ known victims
Handala is motivated by politics rather than just money. Sometimes they destroy data completely instead of ransoming it, making them a different kind of threat.
Overview
Handala is a politically motivated group that sometimes acts as a hacktivist operation with wiper capabilities. They target based on geopolitical motivations.
Target Industries
Government, Critical Infrastructure, Defense, Technology
How They Attack
- • Hacktivist motivation
- • Wiper capabilities
- • Political targeting
- • Data destruction
Notable Victims
Israeli organizations (2024), Government entities
Is your business exposed?
How to Protect Against Handala
- 1.
Assess geopolitical threat exposure
- 2.
Implement wiper detection
- 3.
Maintain air-gapped backups
MITRE ATT&CK Techniques
Is your business exposed?
Check if your company data is circulating on the dark web
Free scan • No credit card required