Iranian-Backed Hacktivist Group Publishes List of IDF Egoz Unit Veterans
An Iranian regime-backed hacktivist group called Handala published a target list on Sunday of a few dozen veterans and reservists from the Israel Defense Forces Egoz commando unit. The group claimed to have exposed the identities of 60 senior officers and said the individuals would become targets for the "resistance's shadows."
unit42.paloaltonetworks.comThe group claimed that it had exposed the identities of 60 senior officers. " "The Egoz Unit, whose name means ‘walnut’ in Hebrew, has long tried to hide behind this tough-sounding name, pretending to be invincible. But today, these ‘empty walnuts’ have been cracked open for all to see," Handala wrote on its website.
"Maybe it’s time they give up guerrilla warfare and take up walnut picking instead. Many openly advertised their past affiliation with Egoz on social media, and according to their LinkedIn profiles, they did not serve beyond their mandatory service.
The most senior individual identified by The Jerusalem Post was an NCO. None appeared to be officers, and they had already established careers outside the military. The group claimed that Hezbollah had been provided with the exact coordinates of all Egoz unit bases to be used by the Lebanese organization's drone units.
On April 25, Handala had published a similar list of 100 individuals it described as senior officers and secret agents from the Maglan unit. The group also targeted U.S. military personnel last Monday by claiming to publish a list of U.S. Navy officers, and on April 28 it released the names of over 2,000 Marines deployed to the Middle East.
Previous Targeting and U.S.
In March, the U.S. Department of Justice seized four web domains associated with Handala target lists and information dumps. Handala dismissed the domain seizures as a desperate attempt and restored its archives to new websites.
Key Facts
Story Timeline
4 events- May 12, 2026
Handala publishes target list of Egoz unit veterans and reservists.
1 source@Jerusalem_Post - April 28, 2026
Handala releases names of over 2,000 Marines deployed to the Middle East.
1 source@Jerusalem_Post - April 25, 2026
Handala publishes list targeting 100 individuals from the Maglan unit.
1 source@Jerusalem_Post - March 2026
U.S. Department of Justice seizes four web domains linked to Handala.
1 source@Jerusalem_Post
Potential Impact
- 01
Handala continues publishing target lists after U.S. domain seizures.
- 02
Hezbollah could incorporate any provided base coordinates into future drone operations.
- 03
The incident adds to ongoing cyber and information operations between Iran-aligned groups and Israel.
Transparency Panel
Related Stories
BBC NewsTrump Meets Advisers to Decide on Iran Ceasefire Extension
President Trump said he is holding a Situation Room meeting to make a final decision on a possible deal with Iran. The proposed agreement would extend the ceasefire by 60 days and reopen the Strait of Hormuz.
Trump to Decide on Iran Deal in Situation Room Meeting
President Trump said Friday he is heading into the Situation Room to make a final determination on a potential agreement with Iran. The proposed deal would reopen the Strait of Hormuz without tolls and require destruction of Iran's highly-enriched uranium.
realitytea.comTrump Says U.S. Will Lift Iran Naval Blockade After Nuclear and Hormuz Pledges
President Trump stated the U.S. will end its naval blockade of Iran once Tehran commits to forgoing nuclear weapons and opens the Strait of Hormuz to unrestricted shipping. The announcement came via Truth Social and a live statement.