MedTech Giant Stryker Crippled by Iran-Linked Hacker Attack

"The Iran-linked hacker group named Handala has taken credit for the attack, claiming to have struck an 'unprecedented blow' to the company. The hackers claim to have wiped more than 200,000 servers, mobile devices, and other systems, forcing Stryker to shut down offices in 79 countries. They also allegedly stole 50TB of data from the company's systems."

"On the surface, Handala is a hacktivist group aligned with pro-Palestinian and anti-Israeli sentiment. However, many in the cybersecurity community believe it's a front for Void Manticore, a threat actor sponsored by the Iranian government. The hackers are known for phishing, data theft."

"The attack reportedly wiped phones, laptops, and other devices configured to connect to Stryker's network. Windows systems appear to have been hit particularly hard. Stryker advised workers not to turn on company devices and to disconnect from all networks immediately."

Stryker, a Fortune 500 medical technology company with 56,000 employees and $25 billion in annual revenue, suffered a major cyberattack by the Iran-linked hacker group Handala. The attackers claim to have wiped more than 200,000 servers, mobile devices, and systems, forcing the company to shut down operations in 79 countries. Approximately 50TB of data was allegedly stolen. The attack affected Windows systems particularly severely, with Handala's logo appearing on login pages. Stryker advised employees not to activate company devices and to disconnect from networks immediately. Handala, active since the US-Israel-Iran conflict began, is believed by cybersecurity experts to be a front for Void Manticore, an Iranian government-sponsored threat actor.

Read at SecurityWeek