Ransomware Group: HANDALA

VICTIM NAME: Shin Bet

NOTE: No files or stolen information are [exfiltrated/downloaded/taken/hosted/seen/reposted/disclosed] by RedPacket Security. Any legal issues relating to the content of the files should be directed at the attackers directly, not RedPacket Security. This blog is simply posting an editorial news post informing that a company has fallen victim to a ransomware attack. RedPacket Security is in no way affiliated or aligned with any ransomware threat actors or groups and will not host infringing content. The information on this page is fully automated and redacted whilst being scraped directly from the HANDALA Onion Dark Web Tor Blog page.

AI Generated Summary of the Ransomware Leak Page

The leak page concerning a recent breach of Shin Bet, the Israeli internal security service, reveals significant details about the security compromise. The attacker, identified as Handala, claims to have infiltrated Shin Bet’s sophisticated security systems, allegedly installing a Trojan on the mobile devices of all Shin Bet officers. The breach is described as a result of a complex hack that allowed Handala to gather extensive confidential data from these devices. This includes crucial information such as phone models, IMEI numbers, mobile numbers, email addresses, and search history, indicating a severe vulnerability in the agency’s security framework.

The leak reportedly comprises over 7 terabytes of data, encompassing 46 million entries related to approximately 30,000 officers. The documents produced by the breach highlight Shin Bet’s self-engineered, rigorous security system designed to protect its officers’ digital engagement. This system, however, is now in question following the hack. The page also emphasizes the importance of understanding the capabilities of the attackers, showcasing the threat to intelligence agencies from sophisticated cyber attacks. There are references to multiple download links available for access to the compromised data. Additionally, the leak page features a total of nine images, which likely display aspects of the compromised information and illustrate the extent of the breach.