Iranian-Linked Hacker Group Handala Claims Cyberattacks on Israeli Military Targets Amid Escalating Conflict On June 7, 2026, the Iranian-linked hacker group Handala announced via Telegram that it had launched cyberattacks against Israeli military targets, allegedly disrupting signal networks across the country’s radar systems. The group also claimed to have placed Kfar Yona municipality a town in central Israel under a "digital siege," warning that the attacks marked "the beginning of the end" and served as a first warning to Israel and its allies. The timing of the announcement coincided with a sudden breakdown in the two-month ceasefire between Israel and Iran, as both nations exchanged heavy missile strikes on the same day. Handala has a history of aligning its cyber operations with real-world military actions for maximum psychological impact. However, cybersecurity firm SOCRadar investigated the claims and found them to be exaggerated. While Handala shared screenshots of an online admin panel for Tadiran Telecom’s Aeonix system a call-routing software used in office telephone systems the evidence did not support a breach of military radar infrastructure. The screenshots depicted an Interactive Voice Response (IVR) setup with Hebrew-language entries, typical of a municipal phone system rather than a defense network. The conflict between Iran and Israel escalated in February 2026 following Operation Epic Fury, a joint U.S.-Israeli bombing campaign, and intensified after the killing of Iranian Supreme Leader Ali Khamenei. A temporary ceasefire, brokered by Pakistan in April, collapsed on June 7, reigniting hostilities. Handala has been active since the war’s onset, with confirmed attacks including a data-wiping operation against medical technology firm Stryker Corporation and the alleged breach of FBI Director Kash Patel’s personal Gmail account. While its latest claims remain unverified, researchers note that Iran-linked hackers continue to pose a persistent threat.

B1ack’s Stash Releases 4.6 Million Stolen Credit Cards in Punitive Dark Web Move On May 19, 2026, the dark web marketplace B1ack’s Stash released 4.6 million stolen credit card records for free not due to a breach, but as a deliberate punishment against resellers violating its rules by offloading inventory on rival platforms. The move flooded the market with compromised data, devaluing resellers’ stock while boosting the marketplace’s own visibility among cybercriminals. Operational since at least 2023, B1ack’s Stash has become a major hub for stolen payment card data. The 4.6 million records included full card details numbers, CVV2 codes, expiration dates as well as cardholder names, billing addresses, emails, phone numbers, and IP addresses. This level of detail enables fraud beyond basic card-not-present transactions, including phishing, unauthorized credit applications, and account takeovers. Of the released records, 4.3 million were deemed usable, with 70% tied to U.S. cardholders. Canada, the U.K., France, and Malaysia accounted for the next largest shares. The dump follows a tactic previously used by other dark web markets, such as BidenCash, which released free card data in 2022 and 2023 to attract users. The release is expected to trigger a surge in fraud attempts, as criminals exploit the zero-cost inventory. Financial institutions, particularly in the U.S., face heightened exposure as the data circulates across criminal forums.