VOID MANTICORE
IntrusionSet · ATTACK:enterprise:G1055
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:G1055",
"title": "VOID MANTICORE",
"type": "IntrusionSet",
"source_url": "https://attack.mitre.org/groups/G1055",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "intrusion-set--ebd7ce77-c9ba-4fba-bb28-58296ac66559",
"external_id": "G1055",
"domain": "enterprise",
"created": "2026-04-20T15:16:16.697Z",
"modified": "2026-07-31T18:48:24.451Z",
"version": "1.0",
"aliases": [
"VOID MANTICORE",
"COBALT MYSTIQUE",
"Handala Hack",
"Homeland Justice",
"Karma",
"Karmabelow80",
"BANISHED KITTEN",
"Red Sandstorm"
],
"tactics": [
],
"source_references": [
{
"source_name": "BANISHED KITTEN"
},
{
"source_name": "Red Sandstorm"
},
{
"source_name": "Handala Hack"
},
{
"source_name": "Homeland Justice"
},
{
"source_name": "Karma"
},
{
"source_name": "COBALT MYSTIQUE"
},
{
"source_name": "Karmabelow80"
},
{
"source_name": "Check Point VOID MANTICORE Handala Hack March 2026",
"url": "https://research.checkpoint.com/2026/handala-hack-unveiling-groups-modus-operandi/"
},
{
"source_name": "DOJ FBI Handala Hack March 2026",
"url": "https://www.justice.gov/opa/media/1431956/dl?inline"
},
{
"source_name": "Domain Tools Handala Hack Karma Homeland Justice MOIS April 2026",
"url": "https://dti.domaintools.com/research/handala-mois-linked-cyber-influence-ecosystem-threat-intelligence-assessment"
},
{
"source_name": "Palo Alto VOID MANTICORE Iran Cyber Threats March 2026",
"url": "https://unit42.paloaltonetworks.com/evolution-of-iran-cyber-threats/"
},
{
"source_name": "Sophos VOID MANTICORE COBALT MYSTIQUE other Names April 2026",
"url": "https://www.sophos.com/en-us/threat-profiles/cobalt-mystique"
}
]
}Explicit source assertions (64)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1113
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--05119f3a-ad4c-41a8-b4af-10813f657437
FBI IC3 Flash VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1110.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--070de14a-70df-4935-ba26-56a14282ae52
Domain Tools Handala Hack Karma Homeland Justice MOIS April 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1119
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0b566985-7ec1-43f0-b511-bad72e0cedb6
Domain Tools Handala Hack Karma Homeland Justice MOIS April 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1561.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0b904ffe-e310-453c-be4d-c647b0e3a1f4
SPECOPS Outpost24 Handala Hack Stryker March 2026 · DOJ FBI Handala Hack March 2026ATTACK:enterprise:C0038 → attributed-to → ATTACK:enterprise:G1055
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--0dd04e16-ad64-4b7d-af2f-12ad644cfe3e
ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1486
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--17f8969b-b2a5-440f-bf7b-9214826fe5f7
Check Point VOID MANTICORE Handala Hack March 2026 · DOJ FBI Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1566
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--18f5dc98-f6fd-489a-ab3e-93f3c613e82e
DOJ FBI Handala Hack March 2026 · Domain Tools Handala Hack Karma Homeland Justice MOIS April 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1589
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--19888971-2a8b-4a33-8b80-e02ca4662f8b
FBI IC3 Flash VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1657
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1c2af2f9-b633-492d-8231-04812104fbd9
SPECOPS Outpost24 Handala Hack Stryker March 2026 · DOJ FBI Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1102
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1f353039-ceda-4477-8fb5-71742102c89b
DOJ FBI Handala Hack March 2026 · FBI IC3 Flash VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1059.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--20139f78-9319-4a34-8b10-8a81dd2b763f
DOJ FBI Handala Hack March 2026 · FBI IC3 Flash VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1047
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--20cb38ca-5e2d-40eb-b104-c1e95ff2ec54
Check Point VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1484.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2520c8da-7587-4869-91a1-60b7fdca0573
Check Point VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1564.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2798da1f-3e11-43d3-b581-2b5e0926feb5
FBI IC3 Flash VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1583.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--285c89fe-b2c7-41ed-8079-822a7fb0bec2
SPECOPS Outpost24 Handala Hack Stryker March 2026 · DOJ FBI Handala Hack March 2026 · Domain Tools Handala Hack Karma Homeland Justice MOIS April 2026 · FBI IC3 Flash VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1123
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2a20e352-f318-4d15-a033-ebcc9a4c9428
FBI IC3 Flash VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1190
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--2f30a994-602d-48a0-bd19-bcd02e1cb322
DOJ FBI Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1114.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--328bd3eb-77a0-476d-bcf7-6cf5b21ed724
DOJ FBI Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1074
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--348b0aa4-9f9a-46f3-81fa-96f5156c03c9
FBI IC3 Flash VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1078.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--40254079-0c5a-4855-89ea-144a9d4585c2
Check Point VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1027.015
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4778b88c-f184-4889-b39c-90fa78e08df5
FBI IC3 Flash VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1684.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--492f94b3-6076-40ee-87be-6b26880a6dce
FBI IC3 Flash VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1036.005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4c4cdef4-a2e9-42af-bd3d-876ae3cc2d4d
DOJ FBI Handala Hack March 2026 · FBI IC3 Flash VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1679
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4f5fa4dc-85fe-45df-a559-876f9a536450
FBI IC3 Flash VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1087.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5b999234-d801-44c1-9436-319b3352d851
Check Point VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1588.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5d1c440e-309c-457b-b36b-eb0103220a4f
Domain Tools Handala Hack Karma Homeland Justice MOIS April 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1490
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--5f58daef-b978-4b88-957c-ef981ca26fca
Check Point VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1072
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--692d7e4a-1208-4626-9bd2-209bc6b2d4f5
SPECOPS Outpost24 Handala Hack Stryker March 2026 · Palo Alto VOID MANTICORE Iran Cyber Threats March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1003.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--6b9cd57b-bd66-4bba-a2d5-09ee2bec19e5
Check Point VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1651
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--746dd580-822c-4f22-b7a0-bf86cab6a742
Palo Alto VOID MANTICORE Iran Cyber Threats March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1583.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--76f7672f-5ae8-4bb7-8eab-823b1b43699b
Check Point VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1583.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7835c871-eb21-4790-ae9f-4d8af0436886
Check Point VOID MANTICORE Handala Hack March 2026 · SPECOPS Outpost24 Handala Hack Stryker March 2026 · Domain Tools Handala Hack Karma Homeland Justice MOIS April 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1686.003
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--7bf0fd88-6289-4dfe-8ba7-508e89ddcee9
Check Point VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1552.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--81cf1179-d422-44fd-9d3d-fadcc8ed2329
Check Point VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1213.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--81fa7012-ab0a-4c16-b729-c390f3cf8eb9
DOJ FBI Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1219.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--856e9f30-99b4-4167-bcb5-f41fc9559d74
Check Point VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1595.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8aec2c68-c1c5-4b96-9511-a3018d89ce2f
DOJ FBI Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1561.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8b331f1e-76b5-47a9-81b4-118083a54198
Check Point VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1583.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8d121adb-baf5-44f2-b456-e0e047be1efe
DOJ FBI Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1105
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8dd66fa2-f73f-4088-a1c6-451513ff614d
Check Point VOID MANTICORE Handala Hack March 2026 · DOJ FBI Handala Hack March 2026 · FBI IC3 Flash VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1082
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--8ee927ba-1638-46c5-8510-a77d584e42d0
FBI IC3 Flash VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1078.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ae75eacd-4727-40e0-a781-146aa8c1e730
Palo Alto VOID MANTICORE Iran Cyber Threats March 2026 · SEC 8-K Stryker Corporation Filing Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1133
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b0c5bff6-44da-421f-adf4-d9b3c8746693
Check Point VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1588.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b1a5dcb8-85f6-4788-a9c5-6f3525615891
Check Point VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1547.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b1bb8990-c773-46aa-8415-b69028d1b4a9
FBI IC3 Flash VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1204.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--b9247c37-ed60-477d-aade-45ceb5ff91a9
DOJ FBI Handala Hack March 2026 · Domain Tools Handala Hack Karma Homeland Justice MOIS April 2026 · FBI IC3 Flash VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1005
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bcbc763e-b51f-4c43-9226-c8c5d545fb74
SPECOPS Outpost24 Handala Hack Stryker March 2026 · DOJ FBI Handala Hack March 2026 · FBI IC3 Flash VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1098
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--c4338a92-0adc-4d7e-a1ff-ab3cc321d914
Domain Tools Handala Hack Karma Homeland Justice MOIS April 2026 · SEC 8K Palo Alto Statement Stryker Corp Handala March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1125
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--cfd35b85-8048-4c8f-9176-603744eecfce
FBI IC3 Flash VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1572
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--dc6d99c1-b20e-448b-a6ed-7d5412bf24d3
Check Point VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1587.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--df1fb9fd-daf9-4820-a145-5b90ee144602
DOJ FBI Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1585.002
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e325701b-8622-40b6-aca7-31ae27633bf5
DOJ FBI Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1071.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e4ba4153-ef0e-4a23-b1fb-880deb52f359
FBI IC3 Flash VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1199
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e59b9a1d-51cb-4ad8-b363-23ac4a7535ec
Check Point VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1110.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--e932046e-705d-4eb0-9cdd-8d35675db540
Domain Tools Handala Hack Karma Homeland Justice MOIS April 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1585.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ea78d30b-6678-475a-93c6-24c1cb7ccf54
Check Point VOID MANTICORE Handala Hack March 2026 · SPECOPS Outpost24 Handala Hack Stryker March 2026 · DOJ FBI Handala Hack March 2026 · Domain Tools Handala Hack Karma Homeland Justice MOIS April 2026 · FBI IC3 Flash VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1485
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ec2d8154-cb3b-4d65-82ba-4e6c81697306
Check Point VOID MANTICORE Handala Hack March 2026 · SPECOPS Outpost24 Handala Hack Stryker March 2026 · DOJ FBI Handala Hack March 2026 · Palo Alto VOID MANTICORE Iran Cyber Threats March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1078
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ed654116-e466-4c79-adc7-3646fda6ae8e
Check Point VOID MANTICORE Handala Hack March 2026 · Domain Tools Handala Hack Karma Homeland Justice MOIS April 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1110
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ee26ee12-a780-4c43-8a20-244b8f91794f
Check Point VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1036.004
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--ee8b12b7-fd0f-4a6c-b075-57052267513c
FBI IC3 Flash VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1059.006
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f193b2de-eb69-469e-b5ff-acf5f149ace8
FBI IC3 Flash VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1560.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f6f25674-a46f-4df0-94b4-e2b08f72b862
FBI IC3 Flash VOID MANTICORE Handala Hack March 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1041
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--f8edd351-4ba0-412c-8f41-72380c5aa065
Domain Tools Handala Hack Karma Homeland Justice MOIS April 2026ATTACK:enterprise:G1055 → uses → ATTACK:enterprise:T1021.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--fc96da3c-0f75-4627-a8aa-aa4fe054c172
Check Point VOID MANTICORE Handala Hack March 2026