The U.S. Department of Justice has announced that it has shut down four websites that were allegedly being used to spread Iranian propaganda, publish hacked data, and threaten critics of the Iranian government. These websites were said to be part of a wider network connected to cyber groups linked to Iran.
According to officials, the websites were tied to three hacking groups known as Handala, Homeland Justice, and Karma Below. Investigators from the Federal Bureau of Investigation stated in court documents that these groups are believed to be run by Iran’s intelligence agency, the Ministry of Intelligence and Security.
Authorities said these platforms were not just simple websites. They were allegedly used for serious activities, including cyberattacks, spreading fear, and targeting individuals who oppose the Iranian government. The Justice Department described these actions as “hacking and transnational repression schemes” along with attempts to influence people through psychological operations.
The move comes at a time when tensions are rising between the United States, Israel, and Iran. Officials are increasingly concerned that cyberattacks could become a major part of this conflict. Kash Patel said authorities are working to stop such operations and warned that more action could follow.
Alleged Hacks, Data Leaks, and Threat Campaigns
The groups behind these websites are accused of carrying out multiple cyber-related activities. One of the main allegations involves a cyberattack on Stryker, a global medical technology company. The company recently reported a cyberattack that disrupted its internal systems worldwide. However, it said that its products, including medical implants, were not affected.
Reports highlighted by cybersecurity journalist Brian Krebs suggest that the group known as Handala claimed responsibility for this attack. The attack was believed to be a response to a deadly incident in Iran, although details remain unclear. The hackers reportedly used the websites to announce their involvement and spread their message.
In addition to this, Handala is also accused of targeting members of a Hasidic Jewish community. The group allegedly shared personal information, including names and details of individuals connected to the Israeli government and military. Authorities said the group even encouraged supporters to take action against these individuals.
Another serious concern raised by officials is the use of threats. The Justice Department said that Handala sent emails containing death threats to Iranian dissidents and journalists. At least one of the targeted individuals was reportedly living in the United States. In one message, the group even claimed connections to a criminal cartel and offered a large cash reward for carrying out an attack.
The websites were also used to take credit for past cyber incidents. One of them was linked to Homeland Justice, which had previously claimed responsibility for a major cyberattack on the Albanian government in 2022.
Cuba faces deepening crisis with blackouts and protests as US raises political issues
Growing Cyber Tensions Amid Conflict
The shutdown of these websites comes during a period of growing tension and conflict involving the United States and its allies. Officials have warned that cyber warfare is becoming an important part of modern conflicts.
Reports have suggested that cyber operations have already been used to disrupt communications in the early stages of the conflict involving Iran. At the same time, groups linked to Iran have issued warnings that American technology companies could become targets of future cyberattacks.
Cybersecurity expert Chris Krebs said that the situation shows how the cyber side of the conflict is becoming more active. Experts believe that the line between independent hacking groups and government-backed operations is not always clear. Some groups may act as proxies, carrying out attacks while maintaining some distance from official government structures.
Officials have also highlighted the long-standing risk posed by Iranian cyber operations. Over the years, there have been multiple cases where individuals critical of the Iranian government were targeted, including attempts to silence or harm them. One such case involved Iranian-American journalist Masih Alinejad, who has been the target of past plots.
This latest development shows how cyber threats continue to evolve. The use of websites to spread propaganda, leak data, and issue threats has become a powerful tool in modern conflicts.