Handala
Handala is an Iran-attributed ransomware group with an ideological motive, tracked by Brandefense. It targets 6 sectors, including Government and Technology, in 7 countries, including the United States and the United Kingdom. It uses 72 MITRE ATT&CK techniques and exploits 1 known CVE.
Also known as
- handala Team
- Origin
- Iran
- Techniques
- 72
- Exploited CVEs
- 1
- First seen
- Jul 22, 2024
- Last seen
- Jul 23, 2024
- Record updated
Who They Target.
About Handala.
A pro-Iranian hacktivist group previously reported for spreading data wipers.
Last updated Oct 14, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.