Hacktivist Group Targets Iran International in Cyberattack, Threatens Journalists

July 08, 2024 – Iran/UK – 

The London-based Persian-language broadcaster Iran International has become the target of a major cyberattack, claimed by a pro-Iranian hacktivist group known as Handala Hack. On July 8, 2025, the group announced that it had breached Iran International’s internal systems, gaining access to communications, servers, and databases containing personal information of staff, journalists, and tens of thousands of viewers and supporters. The hackers have threatened to leak sensitive data unless their unspecified demands are met.

Handala Hack accused Iran International of operating as a front for Israeli intelligence, specifically alleging that the network functions as a Mossad-linked propaganda outlet. In a particularly disturbing move, the hackers publicly named Mojtaba Pourmohsen, a senior UK-based correspondent for Iran International, accusing him of being a Mossad agent and threatening to release his private photos and contacts. They further warned that female staffers would be the next targets.

This attack is part of a broader surge in digital aggression linked to Iran’s geopolitical tensions. Handala Hack is one of more than 130 pro-Iranian hacktivist groups active in cyberspace, often engaged in psychological operations, data breaches, and disinformation campaigns aimed at Israeli, Western, and diaspora targets. While their claims remain unverified, security analysts suspect the group operates with backing or coordination from Iranian intelligence services.

The cyberattack signals a dangerous escalation in the targeting of journalists, with threats moving beyond state borders to intimidate diaspora media. Iran International has long been in the crosshairs of the Iranian regime due to its critical reporting on Tehran. In recent years, the outlet has faced death threats, police protection, and surveillance, now compounded by cyber intimidation.

Digital watchdogs and press freedom advocates warn that such attacks not only endanger journalists’ safety but also threaten the confidentiality of their sources. By weaponizing personal data and online surveillance, hostile actors aim to undermine independent journalism through fear and exposure.

The incident highlights the increasing vulnerability of media outlets operating in exile and the growing intersection of cyberwarfare and press freedom. As threats evolve, there is an urgent need for stronger international protections and digital security measures to safeguard journalists from these transnational attacks.

Reference – 

https://cybernews.com/news/iran-international-cyberattack-handala-hacktivists-threaten-journalists/