The Federal Bureau of Investigation (FBI) has taken control of two websites linked to the pro-Iranian hacktivist group Handala, after the group claimed responsibility for a destructive cyberattack on U.S. medical technology company Stryker.
Authorities say one of the sites had been used to publicize Handala’s hacking activities, while the other was reportedly used to dox dozens of individuals associated with Israeli defense contractors, including Elbit Systems and NSO Group. Both websites now display a banner confirming the federal seizure.
According to U.S. officials, the domains were suspected of being operated in coordination with a foreign state actor. The seizure notice stated:
“Law enforcement authorities determined this domain was used to conduct, facilitate, or support malicious cyber activities on behalf of, or in coordination with, a foreign state actor.”
READ ALSO: Hackers launder $49.3m in Ethereum through tornado cash, fueling market decline
In response, Handala condemned the FBI’s action on its official Telegram channel, calling it a “desperate attempt to silence our voice”. The group vowed that its operations and mission would continue despite the seizure, framing the move as an act of censorship.
Cybersecurity experts noted that the FBI’s action is part of a broader effort to disrupt ongoing malicious operations, prevent further exploitation, and send a signal to other state-linked hacktivist groups targeting critical infrastructure and private sector firms in the United States.
The seizure underscores the increasing tensions in cyberspace between U.S. authorities and foreign-backed cyber actors, particularly those linked to political or ideological causes, as the federal government ramps up measures to secure sensitive industries and safeguard national security.