Get Plus

Sign in to baba News

One account across the web, iPhone and Android — your subscription follows it.

or use an email code

Search stories

Type at least two characters. Results come from every newsroom baba reads.

↑↓ to move · ↵ to open · esc to close

Sign in to baba News

Sign in to keep asking. News Plus removes the daily limit.

or use an email code

Full coverage· Security· Updated

Iranian Hackers Distribute Threatening Leaflets in North Tel Aviv

Israeli police and the Shin Bet have launched a joint investigation after threatening leaflets were discovered in residential mailboxes across northern Tel Aviv on Monday morning. The leaflets, designed in dark red, feature the slogans "No Water" and "No Electricity" alongside a QR code that directs recipients to a website containing hostile messages.

16 newsrooms · 4 languages · since

Sign in to baba News

Sign in to save this article and find it on your phone.

or use an email code

Iranian Hackers Distribute Threatening Leaflets in North Tel Aviv
Illustration by baba

What happened

  1. 01Israeli police and the Shin Bet are investigating threatening leaflets found in northern Tel Aviv mailboxes on Monday.
  2. 02The leaflets contain QR codes directing recipients to a website operated by the pro-Iranian hacker group Handala.
  3. 03Handala claimed its activists distributed hundreds of thousands of flyers overnight in residential areas of Tel Aviv.
  4. 04The group threatened to disable Israel's power stations, oil refineries, and desalination plants in response to any attacks on Iranian energy infrastructure.
  5. 05Police warned the public not to scan the QR codes, citing severe mobile security vulnerabilities and potential malware.
  6. 06Yarkon district police officers collected evidence from multiple locations, including the Ramat Aviv Gimel neighborhood.
  7. 07Security agencies identify the Handala hacking group as an operational cyber arm of Iran's Ministry of Intelligence.

The pro-Iranian hacker group Handala, which security agencies identify as an operational cyber arm of Iran's Ministry of Intelligence, claimed responsibility for the operation. The group asserted on Telegram that dozens of its activists distributed hundreds of thousands of flyers overnight door-to-door in Tel Aviv, sharing video footage of mailboxes filled with the leaflets, including in the Ramat Aviv Gimel area.

The website linked to the QR code warns of severe retaliation if Israel targets the energy infrastructure of the "Axis of Resistance." The message threatens that Israeli power stations, oil refineries, and desalination plants will be disabled, warning residents that they will be forced to live in shelters "without electricity, without water, and without hope."

Police officers from the Yarkon district responded to multiple locations, conducted searches, and collected the materials as evidence. Authorities have issued an urgent warning to the public to avoid scanning the QR codes, as doing so could expose mobile devices to malicious software and severe security vulnerabilities. The public has been urged to report any findings to the police hotline.

Summarized by baba from the reports of 14 newsrooms. Updated

Latest report: Ynetnews. Read Ynetnews’s original

The coverage

16 newsrooms on this story

Who covered it

  • Left1
  • Centre7+2
  • Right2
  • Haredi3
  • ArabNone
  • Other3

How it broke

See which of the 16 newsrooms broke it, and who waited

How the headlines differ

YnetnewsCentre · the lead report

Iranian Hackers Distribute Threatening Leaflets in North Tel Aviv

13 more newsrooms worded it differently