An Iranian-linked hacking group on Sunday said it had gained access to the mobile phone of Israeli Prime Minister Benjamin Netanyahu’s chief of staff, Tzachi Braverman, and threatened to publish material it said would link him to a political scandal.
The group, known as Handala, said in a post on the social media platform X that it had hacked an iPhone belonging to Braverman and would release documents later in the day related to what it called “Bibi Gate,” an apparent reference to allegations surrounding Netanyahu’s inner circle.
Israel’s Prime Minister’s Office said no breach had been identified. “No breach has been found. The issue is being investigated,” it said in a statement.
Handala has previously claimed responsibility for cyber intrusions targeting Israeli figures and institutions.
Earlier in December, the group said it had accessed data from the phone of former prime minister Naftali Bennett, though Bennett later said his device itself had not been hacked and that unauthorized access had instead been gained to his Telegram account.
On Sunday, the group released what it described as initial files allegedly taken from Braverman’s phone, including lists of phone numbers it said belonged to senior Israeli officials and individuals close to Netanyahu, as well as documents and videos that appeared to relate to official government matters.
In its posts, the group alleged it possessed encrypted communications, financial records and other sensitive information. It did not provide evidence supporting those claims. Iran International could not independently verify the authenticity of the material.
The alleged threat comes amid heightened political tensions in Israel over investigations known collectively as the “Qatargate” affair, in which two advisers to Netanyahu are accused of having worked for Qatar while employed in the prime minister’s office. Netanyahu and his aides have denied wrongdoing.
One of the advisers, Eli Feldstein, has separately admitted leaking classified information to Germany’s Bild newspaper, according to Israeli media, in a case Israeli authorities say is under investigation. Feldstein has alleged that Braverman was aware of an internal military probe into the leak, an accusation Braverman has denied.
Braverman, who has been named as Israel’s next ambassador to Britain, has rejected any link to the scandals.
Cybersecurity researchers and Western officials have widely described Handala as being tied to Iran’s Ministry of Intelligence, though Tehran has not publicly acknowledged any connection.
The group is believed to be part of a broader cyber operation that researchers link to a unit known as “Banished Kitten,” which has been associated with attacks on Israeli infrastructure, public institutions and media organizations.
Handala has also been linked by researchers to cyber operations targeting Iran International, a London-based Persian-language broadcaster critical of the Iranian government.
