Handala is a shadowy pro-Palestinian hacktivist group that surfaced in late 2023, right after October 7. It takes its name from the iconic cartoon boy created by Palestinian artist Naji al-Ali in 1969—a barefoot 10-year-old refugee with his back turned, symbolizing eternal defiance until Palestinians return home. But here's where it gets intriguing: while Handala poses as grassroots activists, cybersecurity experts, Western governments, and Israeli sources strongly link it to Iran's Ministry of Intelligence (MOIS)—often as a front for Banished Kitten (aka Storm-0842 or Dune). It's widely seen as a state-backed operation with deniability, blending hacktivism with psychological warfare. The group has unleashed dozens of operations:Doxxing and leaking personal details of Israeli defense engineers, politicians, and tech pros (e.g., drone/UAV developers, missile defense like Arrow and David's Sling). Offering cash bounties—up to $30,000—for more info on targets, complete with photos, addresses, and threats. Threatening messages, fake breaches (e.g., claiming Iron Dome hacks), and even leaving symbolic "gifts" like bouquets in victims' cars. Targeting critics of Iran, like hacking journalists at Iran International in 2025 and releasing intimate data to intimidate. Recent highlights (as of December 2025): They claimed to expose Israeli drone engineers and offered bounties, threatened politicians like Itamar Ben-Gvir and Benny Gantz, and even boasted about breaching ex-PM Naftali Bennett's phone (disputed by him). Many claims are exaggerated or unverified, but the intent is clear: intimidation and propaganda. Handala's playbook? Disrupt, doxx, taunt on Telegram (channels get banned and reborn), and amplify Iran's hybrid warfare—especially when military options are limited. This isn't pure hacktivism. It's Tehran's digital hit squad hading in civilian shadows.