JUST-IN: The War Just Entered The Iran Operations Room

An Iran-linked hacker group called Handala claimed responsibility for a cyberattack on Stryker Corporation, the American medical technology company that manufactures surgical robots, joint replacements, spinal implants, and operating room equipment used in hospitals across 79 countries.

The Wall Street Journal confirmed the attack. ABC News confirmed global network disruption.

Handala claims it wiped 200,000 systems and extracted 50 terabytes of data.

Stryker confirmed the incident but reported no ransomware or malware detected.

The Handala logo appeared on employee login screens across the company’s global operations.

The group’s manifesto is explicit. This is retaliation for US and Israeli strikes on Iran.

Handala is not anonymous. Palo Alto Networks’ Unit 42, one of the world’s leading threat intelligence firms, links the group to Iran’s Ministry of Intelligence and Security.

The group emerged in late 2023 and specialises in wiper malware: software designed not to encrypt data for ransom but to destroy it permanently.

They are not criminals seeking payment. They are operatives seeking damage.

The distinction matters because you can negotiate with a ransomware gang. You cannot negotiate with a wiper deployed for geopolitical retaliation.See more, details. .