Handala’s Israeli Radar Disruption Claim Appears Unverified
Threat Actor Intelligence · 4 sources · Updated 4mo ago · First seen Jun 8, 2026

The Iranian-linked Handala group claimed it had disrupted Israeli radar systems and placed the Kfar Yona municipality under a “cyber siege” amid renewed Iran-Israel hostilities. Reporting on the incident found that the evidence released by the group does not substantiate a radar intrusion: the screenshots and access shown appear to match a Tadiran Telecom Aeonix IVR/VoIP administration panel, suggesting compromise of a municipal or organizational phone system rather than military radar infrastructure.
Researchers said the operation fits a broader pattern in which cyber activity is used to amplify battlefield messaging during escalating regional conflict involving Hezbollah fire, Israeli strikes in Beirut, IRGC missile launches, and Israeli retaliatory strikes on Tehran, Tabriz, and Isfahan. While the specific radar-disruption claim bears the hallmarks of propaganda and remains uncorroborated by independent evidence or official acknowledgment, Handala is described as a real state-affiliated threat actor with documented capabilities including credential theft, abuse of legitimate enterprise tools, wiper malware, and hack-and-leak operations, raising the likelihood of further disruptive attacks and inflated claims.


