WANA (Jul 09) – As part of its ongoing cyber operations against the “Iran International” network, the hacker group “Handala” has issued a new statement, emphasizing that their infiltration into the network was far more extensive than previously assumed.

 

According to the statement, the Handala hackers claimed that contrary to the initial belief that the attack was limited to the Telegram platform, they had maintained continuous and covert access to various layers of the network’s communication and information infrastructure for over 31 months — that is, two and a half years.

An image related to the disclosure was published by Handala. Social media/ WANA News Agency

The statement reads: “We lived in the shadows of deleted files, passed through encrypted tunnels, and were present in meetings that even the senior managers of the network were not permitted to attend.”

 

Handala emphasized that all messages, calls, files, and conversations exchanged via WhatsApp, Signal, and other communication platforms have been archived by them. It was also claimed that this infiltration remained undetected despite Iran International’s use of advanced commercial cybersecurity tools (EDR).

An image related to the disclosure was published by Handala. Social media/ WANA News Agency

The group reiterated that more information will be released, warning: “What has been published so far is only the tip of the iceberg… We are still here — like a shadow in the corner of your vision.”

 

It is worth noting that Handala had previously claimed responsibility for attacking Telegram channels and extracting information from the internal systems of Iran International — a breach that was also confirmed by the network’s managers. The hacker group has already published several hacked documents.

 

Additionally, in another statement, the group revealed information regarding the alleged connection of one of Iran International’s media figures with the Mossad intelligence agency. The statement emphasized that a meeting held in the Halstead area of the United Kingdom — believed to be confidential — had been fully recorded and wiretapped, and that the related files are now in the group’s possession.

An image related to the disclosure was published by Handala. Social media/ WANA News Agency

The Handala hacker group also stated that the meeting location had been prepared months in advance for surveillance and data collection by what it referred to as the “London Station Team.”

 

The group further claimed that the identity of Mojtaba Pourmohsen, affiliated with Iran International, as a “Mossad intelligence collaborator” is no longer a hypothesis, but rather “a documented and undeniable reality.”

 

They also referred to a specific conversation with an individual named “James” — described in the statement as the case officer — stating that certain operations linked to this file were designed as part of an “information entrapment” scheme.

An image related to the disclosure was published by Handala. Social media/ WANA News Agency

Tehran Prosecutor Reacts to Publication of List of Individuals Linked to Hostile Media

In response to recent revelations and the release of names allegedly tied to anti-Iranian media outlets, Tehran’s Prosecutor Ali Salehi made the following statement: “If there is documented evidence and sufficient grounds proving criminal activity, legal action will certainly be taken.”

 

He stressed that the judiciary will not tolerate any acts against national security, stating: “The judiciary will show no leniency toward any actions that threaten the country’s national security. Safeguarding the nation’s security is our red line, and we will deal firmly and legally with any espionage activities or collaboration with the enemies of the Islamic Republic.”