Today, Israel and Iran traded missile fire, the first since the ceasefire two months ago. In the same day, the Iranian-linked hacker group Handala claimed to have launched a “widespread and targeted” disruption to Israeli radar systems. 

However, researchers from SOCRadar are skeptical of this claim for five reasons: 

1. Evidence shared does not support the claim. The screenshots shared on Handala’s Telegram channel aren’t consistent with access to a military radar system; rather, they suggest compromise of a municipal phone system. In addition to Handala’s claims of compromising the radar systems, they also claimed to access systems related to the Kfar Yona Municipality, so the evidence may suggest this particular part of the claim is true — but it doesn’t prove any radar compromise. 
2. The claim comes wholly from one side of an active conflict. No other sources have yet corroborated it. 
3. There has been no response from Israel. No acknowledgements of the claim have been made by the Israel National Cyber Directorate, the IDF, or the Israeli media; however, this falls in line with how the nation has handled previous statements from Handala. 
4. The timing and language indicate potential propaganda. Claiming this disruption during missile strikes narratively presents Israel’s defenses as weakening from physical and cyber fronts simultaneously. 
5. This is not the first time Handala has made grand claims. Previously, Handala has been caught fabricating evidence for their claims. 

Nevertheless, Handala has been involved in notable cyber strikes in recent months. As the conflict continues, it is likely that more cyberattack claims — whether true or not — will unfold.