Iran-Linked Group Claims FBI Drone Hack, Issues World Cup Threat
On Friday, June 12, 2026, the Iran-linked hacker group Handala claimed it had long-term access to FBI first-person-view (FPV) drone feeds and warned those drones could be used to target a World Cup team bus.[1]
SITE Intelligence Group published Handala's statement accusing the FBI of insecure drone streams.[1] The message included an explicit threat tied to the 2026 World Cup and urged tighter security around teams and venues.[1] The FBI is using FPV drones with facial-recognition and license-plate screening around World Cup stadiums, and other drone flights are banned over U.S. match and fan zones.[1]
U.S. and Israeli airstrikes on Iranian targets began February 28, 2026, damaging military and government sites in Tehran and other cities. Handala emerged in late 2023 and has claimed multiple cyberattacks since the strikes, including a March malware incident and a March 27 claim that it breached FBI Director Kash Patel's personal email.[1] The Justice Department seized Handala-linked domains in March, and the State Department is offering up to $10 million for information on the group.[1]
SITE and other analysts disputed Handala's proof, finding at least one posted video was a reused December 2024 software promo unrelated to any FBI system.[1] U.S. cyber and security officials have warned Iranian actors view the 2026 World Cup as a likely strategic target, making any credible access to surveillance systems a serious concern. The tournament spans 104 matches in 16 stadiums across the U.S., Canada and Mexico, with 11 U.S. venues and projected attendance that could exceed 1994 levels.
The mainstream summary does not mention that Handala is assessed by multiple security firms as a front for Iran's Ministry of Intelligence and Security, which adds a layer of state-sponsored intent behind their cyber operations. This context is crucial, as it frames the group not merely as independent hackers but as part of a broader strategy of asymmetric warfare employed by Iran against its adversaries, particularly during heightened geopolitical tensions following U.S. and Israeli airstrikes on Iranian targets. The summary also overlooks the significant scale of the 2026 World Cup, which is projected to exceed the attendance of the 1994 tournament and draw up to 10 million international visitors to the U.S., indicating the potential impact of any security breaches on a global stage. Furthermore, U.S. government agencies have explicitly warned that Iranian cyber threats to critical infrastructure are ongoing, with the World Cup identified as a strategic priority, highlighting the urgency of the situation beyond the immediate claims made by Handala. This broader perspective underscores the serious implications of the group's threats and the vulnerabilities of U.S. security systems in the context of the upcoming tournament.[2][3][4]
Show source details & analysis (1 source)
📊 Relevant Data
The Handala Hack Team is an Iranian-linked hacktivist group that emerged in late 2023, has conducted cyberattacks and data leaks against U.S. and Israeli targets, and is assessed by multiple security firms as a front or persona for Iran's Ministry of Intelligence and Security.
Handala Hack Team — Wikipedia
The 2026 FIFA World Cup features 104 matches across 16 stadiums in the United States, Canada, and Mexico, with 11 U.S. venues, and is projected to set a new attendance record exceeding the 3.5 million spectators of the 1994 tournament while drawing up to 10 million international visitors to the United States.
A virtual tour of the World Cup 2026 stadiums — Al Jazeera
U.S. government agencies including CISA have warned of ongoing Iranian cyber threats to critical infrastructure and noted the 2026 World Cup as a likely strategic priority for Iranian actors amid the ongoing conflict.
The Iranian Cyber Threat to U.S. Critical Infrastructure — CSIS
📌 Key Facts
- On Friday, June 12, 2026, SITE Intelligence Group published a statement from Iran-linked hacker group Handala claiming long-term access to FBI FPV drone feeds.
- Handala’s message included an explicit threat tied to the 2026 World Cup, warning that FPV drones could target a team’s bus and urging tighter security.
- The FBI is using FPV drones with facial recognition and license plate screening around World Cup stadiums, while other drone flights are banned over U.S. match and fan zones.
- SITE disputed Handala’s proof-of-hack, determining at least one posted video was a reused December 2024 software promo unrelated to any FBI system.
- Handala previously claimed in March 2026 to have hacked FBI Director Kash Patel’s email; the State Department is offering up to $10 million for information on the group.
📰 Source Timeline (1)
Follow how coverage of this story developed over time