Iranian Hackers Say They Spent Months Inside Networks Linked to Former IDF Chief Herzi Halevi

On Thursday morning, the Iranian hacker collective "Handala" said it had, over an extended period, infiltrated systems allegedly connected to the office of former IDF Chief of Staff Herzi Halevi and carried out large-scale collection of sensitive information.

According to the group, this was an ongoing operation rather than a one-off incident, during which they amassed large quantities of varied material, including thousands of photos and videos alongside various documents and items it labels as classified.

The hackers added that the trove also includes the alleged identification of military and security personnel, describing it as the product of prolonged surveillance of Halevi. They framed the disclosure as part of a broader campaign and emphasized their intention to continue releasing additional content.

The group also posted what it says is personal footage of Halevi, allegedly filmed inside his home, adding to a stream of materials uploaded online. In total, the hackers said they have posted more than 60 photos and videos, while insisting these releases represent only a small portion of what they possess.

These developments come amid an international law-enforcement effort targeting the same group. The U.S. Federal Bureau of Investigation (FBI) announced in the middle of last month that it had seized and taken offline four key domains used by "Handala." The move came just days after a major cyberattack attributed to the group that included a breach of the American medical device company Stryker.

According to the U.S. Department of Justice, the seized websites were used as platforms to disseminate stolen data, run psychological-warfare activity, and coordinate cyberattacks against targets in the West and in Israel.