handala
- First seen
- 2019-01-01 00:00:00
- Malware type
- trojan
- Family
- Malware family
- Last IoC activity
- 2026-07-21 04:43:38
- Profile updated
- 2026-07-07 13:14:29
Targeted industries: government-and-public-sector
Targeted regions: country_code:ps
Context
Handala is a trojan known to target government entities, primarily in the Palestinian territories. It has been used in cyber espionage campaigns and is associated with politically motivated threat actors.
Reports & references
- splunk.com — Handalas Wiper Threat Analysis And Detections (report)
- trellix.com — Handalas Wiper Targets Israel (report)
- intezer.com — Stealth Wiper Israeli Infrastructure (report)
- ransomlook.io — Handala (report)
- threats.wiz.io — Handala (report)
- malpedia.caad.fkie.fraunhofer.de — Handala (report)
- splunk.com — Handalas Wiper Threat Analysis And Detections (report)
- scworld.com — Handala Hacking Group Asserts Attacks Against Israel (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Handala (report)