As the attacks continue, Iranians have turned to Space X’s satellite internet technology — including one of the country’s most notorious hacker crews, which is claiming retaliatory cyberattacks against the U.S.
As the attacks continue, Iranian s have turned to Space X’s satellite internet technology — including one of the country’s most notorious hacker crews, which is claiming retaliatory cyberattacks against the U.
S.ver the last two days, an Iranian hacker group called Handala has used X to threaten the West with cyberattacks in retaliation for the U.S. and Israeli missile strikes. But it’s been relying on American technology, from Elon Musk’s Starlink, to stay online. The crew has been using Starlink satellite internet since at least mid-January, when Iran shut down its internet over concerns of foreign cyberattacks on its networks, according to analysis from Israeli cybersecurity company Check Point. Gil Messing, chief of staff at Check Point, confirmed the company’s data shows the group continued to use Starlink until at least February 28, the day of the strikes, and he believes Handala continues to use it today.Handala is either operated or directed by Iran’s Ministry of Intelligence and Security . It is one of a number of groups operating under the guise of hacktivism that are actually linked to the government, they said. Most recently, Handala “They’re the most notorious hacking group the regime uses,” says Messing. He says he’d contacted Starlink to inform the company about hackers’ use of its tech, but he’d not received a response. SpaceX did not respond toStarlink terminals, which provide satellite internet access, are prohibited from use in Iran, both by the regime and because of American sanctions. But as many as 30,000 are operational in the country, according to Holistic Resilience, a nonprofit trying to keep Iranians online. They’re smuggled into the country thanks tothat the Trump administration has helped smuggle Starlink tech into Iran, in large part to allow protestors to broadcast what is happening in Tehran to the outside world. But encouraging Starlink use in the country appears to have allowed anti-American groups like Handala to benefit too. In recent days, Handala has used another Elon Musk platform, X, to tweet its support for Iran and claim successful hacks into Jordan’s fuel infrastructure and unspecified oil and gas sector businesses.On Sunday, the day after the strikes, Handala wrote on X, “Those who started the fire will hear the echo of our response in their own skies tonight. Our patience has reached its end, and our answer will be as decisive as history itself.” Former Israeli intelligence staffer Sanaz Yashar, now cofounder and CEO at cyber company Zafran, said that Handala’s continued operation indicates that missiles aren’t an effective way to shut down cyber operations. “It can work temporarily, but they will come back,” she tellsGiven Handala’s ties to Iranian intelligence, the group’s premium X account, which costs $8 monthly, could pose a problem for Musk. MOIS is under U.S. sanctions, so it’s illegal for an American company to do business with the agency. Handala is not the only Iranian government-linked group with a premium account: Last month, the Tech Transparency Project, a nonprofit focused on big tech accountability, released ashowing how Iranian leaders like the head of its judiciary, and media entities like state-run TV station Al-Alam, had bought premium accounts on X. X did not respond to requests for comment at the time of publication. Following the missile strikes this weekend, both sides launched cyberattacks. Fatimiyoun Electronic Team, another hacktivist group tied to MOIS, tried to infect Israeli computers with “wiper” malware aimed at erasing data, according to analysis from Flashpoint, an American cybersecurity research company. BadeSaba, an Iranian prayer and calendar app used by over 5 million, was also breached. Hackers broadcasted messages over the app, instructing members of the Iranian Revolutionary Guard Corps to surrender, and providing coordinates for “safe zones” for anti-regime protesters.
Starlink Iranian Elon Musk Iran Israel US Strikes Cybersecurity Cyberattacks
United States Latest News, United States Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
$270M E-3 Sentry spy plane demolished by Iranian attack at Saudi air base: photosToday's Video Headlines: 3/29/2026
Read more »
Iranian Hackers Claim Breach of FBI Director's EmailThe Handala Hack group, linked to Iran, claims to have breached the personal email account of FBI Director Kash Patel, releasing private photos, his resume, and a larger file. The FBI confirmed the hack but stated the information is historical and involves no government data. This incident occurs amid ongoing tensions and ceasefire talks between the U.S. and Iran.
Read more »
Iranian Hackers Breach FBI Director's Email AccountCybercriminals linked to Iran accessed FBI Director Kash Patel's personal email, leading to an FBI investigation and the State Department offering a reward for information. The Handala HackTeam claimed responsibility, posting images online. This incident follows the Justice Department's seizure of domains connected to the group and is part of a broader pattern of Iranian cyberattacks.
Read more »
E-3 Sentry AWACS from Tinker Air Force Base damaged in Iranian strikeA U.S. Airfoce E-3 Sentry AWACS from Oklahoma's Tinker Air Force base was damaged during a strike on an airbase in Saudi Arabia.The plane was on the ground whe
Read more »
Iranian Official Warns of Potential US Ground Attack Amidst TensionsAn Iranian official warns that the US may be planning a ground attack, despite public statements about ongoing negotiations. The official expressed concern over the deployment of US troops to the region, and discussed the potential seizure of key Iranian locations. He emphasized that Iranian forces are prepared for a ground assault.
Read more »
Key Iranian heavy water plant offline after IDF strike: IAEAThe IAEA said the plant, which has 'no declared' nuclear material, suffered damage from an IDF strike and is 'no longer operational.'
Read more »