Iranian Hackers Target Netanyahu Aide's iPhone Security

Iranian-linked hacking group Handala is claiming it has compromised the mobile phone of one of the most sensitive figures in Israel’s political system, raising concerns about cyber warfare, psychological pressure tactics, and the vulnerability of senior officials’ communications, even as Israeli authorities say there is currently no indication of a breach.

The group alleged over the weekend that it gained long-term access to the iPhone 16 Pro Max used by Tzachi Braverman, chief of staff to Prime Minister Benjamin Netanyahu. In messages circulating online, the hackers claimed they possess files, private chats, audio recordings, and video material taken from the device, threatening to publish the contents in stages.

Handala’s statement was written in deliberately theatrical language, portraying the group as having silently monitored internal decision-making and personal communications at the heart of the Prime Minister’s Office. “The vault you depended on is now ours,” the group wrote, framing the alleged breach as both a technical success and a symbolic exposure of Israel’s leadership.

Israeli officials moved quickly to tamp down the claims. A source in the Prime Minister’s Office said Sunday morning that there were no indications Braverman’s phone had been compromised, while confirming that the matter was under investigation. “At this stage, there are no indications that Chief of Staff Braverman’s mobile phone was compromised,” the source said, stressing that any credible threat would be treated with maximum seriousness.

If the hackers’ claims were ultimately proven accurate, the consequences could be significant. A successful breach of the chief of staff’s phone would potentially expose sensitive contacts, internal scheduling, strategic discussions, and security-related communications. Even without public disclosure, the mere possibility of access would force an immediate security overhaul across the Prime Minister’s Office and connected agencies, treating any information linked to the device as potentially compromised.

For now, however, the allegations remain unverified. Handala has not released material that conclusively demonstrates access to Braverman’s phone, instead relying on threats, insinuation, and selective publication of publicly known photographs. Israeli officials have emphasized that such tactics are common in influence operations designed to sow doubt and panic even when no breach has occurred.

The claim follows a pattern. Less than two weeks earlier, the same group asserted it had hacked the Telegram account of former prime minister Naftali Bennett. Bennett’s office initially denied the report, but the hackers later released documents, images, and extensive contact lists. Bennett later acknowledged that his Telegram account had indeed been breached, lending the group a degree of credibility that now complicates official denials.

Handala has also published a cryptic poem referencing Netanyahu’s recent flight to the United States, titled “Flight BB Gate,” an apparent attempt to suggest foreknowledge of sensitive movements or undisclosed incidents. While the group made no direct claim of hacking Netanyahu himself, the language was clearly intended to project omnipresence and psychological pressure rather than technical specifics.

The timing is notable. The allegations surface amid heightened scrutiny of internal affairs within Netanyahu’s orbit, including the so-called Qatargate investigation involving several of his advisers. Handala has hinted, without evidence, that it possesses incriminating material related to that case as well.

Cybersecurity experts note that even false or exaggerated hacking claims can have real-world effects. The threat of leaks can force officials into defensive postures, disrupt operations, and undermine public confidence. In that sense, the operation succeeds even if the technical breach never occurred.

Israeli authorities say the investigation is ongoing and urge caution in treating the hackers’ statements as fact. For now, the episode serves as another reminder that in the current regional confrontation with Iran, the battlefield extends well beyond missiles and airstrikes, into phones, messaging apps, and the psychological space between proof and panic.