First they went after medtech, then Kash Patel. Iranian hackers’ next target is likely ‘low-hanging fruit’ in water, energy, and tourism, experts say

In late March, photos from FBI Director Kash Patel’s past began appearing online. One photo showed him with a cigar in his mouth. In another, he’s holding a baby. 

The photos were released as part of a cyberattack on Patel’s personal email that revealed more than 300 messages dated between 2010 and 2019, as well as a work résumé and travel documents. The Iran-linked and pro-Palestinian hacker group Handala Hack Team claimed responsibility for the attack. 

Targeting high-profile figures like Patel is part of Iran’s larger war strategy to sow disruption in the U.S. and Israel, according to experts. 

Handala’s attack against Stryker on March 11 put the medical technology company’s 56,000 employees operating in 61 countries at a standstill, while order processing, manufacturing, and shipping were halted. The company was not fully operational for three weeks following the attack, which it reported had a material impact on first-quarter earnings. 

Earlier this week, the FBI, the National Security Agency, the Cybersecurity and Infrastructure Security Agency, and the Department of Energy issued a joint advisory, warning Iran-backed hackers were targeting cri...