US Offers $10 Million to Identify Iranian-Linked Hacking Group Threatening World Cup Security

By Patricia Miller

Jun 12, 2026

2 min read

The US State Department offers $10 million for information on Handala, an Iran-linked hacking group claiming to breach FBI drones.

#What is the significance of the $10 million reward for information about Handala?

The US State Department has announced a substantial reward of $10 million for information leading to the identification of members of Handala, a hacking group linked to Iran. This move highlights the serious attention that US officials are paying to the group’s activities, particularly their claims regarding the compromise of FBI drones intended for the security of the upcoming 2026 FIFA World Cup. While there are ongoing debates about the authenticity of Handala’s assertions, the reward underscores the potential threat posed by this entity.

#Who is Handala and why is this hacking group a concern?

Handala first emerged in late 2023, presenting itself with pro-Palestinian messaging. However, US intelligence has categorized it as an extension of Iran’s Ministry of Intelligence and Security, fundamentally altering perceptions of the group. Additionally, Handala has been classified within the Void Manticore threat cluster by cybersecurity experts. The group has been implicated in multiple hacking incidents, including significant breaches against both Israeli and American organizations. The recent reward announcement is also related to past infiltrations attributed to Handala, notably involving the personal email of FBI Director Kash Patel in March 2026.

#How credible are Handala's claims about compromising FBI drones?

When evaluating the credibility of Handala’s assertions regarding FBI drone access, it is essential to note that the group has yet to provide verifiable evidence substantiating these claims. The SITE Intelligence Group, which monitors extremist communications, indicated that Handala lacks concrete proof, such as screenshots of control systems or telemetry data. Notably, while state-sponsored hacking entities often refrain from revealing specific tactics to maintain their operational advantages, the absence of demonstrable proof places these claims in a murky area between credible threat and possible misinformation.

#What implications do Handala's activities have for digital assets and security?

Analyses by SITE Intelligence Group found no established connections between Handala’s claimed drone activities and any specific cryptocurrencies or blockchain transactions. However, it is crucial to consider the broader context of state-sponsored cyber activities. For instance, the North Korean Lazarus Group has a history of successfully executing cyberattacks targeting the cryptocurrency sector. While Iran’s current cyber agenda appears more focused on traditional targets, the existing infrastructure supporting groups like Handala raises the possibility of future cyber endeavors aimed at digital assets, especially if geopolitical circumstances evolve.

Explore more on these topics:

Important Notice And Disclaimer

This article does not provide any financial advice and is not a recommendation to deal in any securities or product. Investments may fall in value and an investor may lose some or all of their investment. Past performance is not an indicator of future performance.