The who, what, and why of the attack that has shut down Stryker's Windows network"

"Such actions are taken for their psychological effects, which are often disproportionately larger than the resources required to bring them about. With limited means for Iran to strike back militarily, the Stryker disruption allows an alternative means for the country and its allies to retaliate. The success is intended to demonstrate that pro-Iranian forces can still exact a price that has a material effect on large populations in the US, Israel, and countries allied with them."

"As a major supplier of lifesaving medical devices relied on throughout the US and its allies, Stryker plays a strategic and symbolic role in their security, researchers at Flash Point said Thursday. By operating behind a persona styled as a grassroots, pro-Palestinian resistance movement, Iranian state-nexus actors are able to conduct destructive cyber operations against Western organizations while maintaining a degree of plausibility."

Handala Hack is a hacking group operating since at least 2023, named after a Palestinian resistance symbol and affiliated with Iran's Ministry of Intelligence and Security. The group maintains multiple online personas and has conducted destructive wiping attacks and influence operations. It claimed responsibility for disrupting Stryker, a major medical device supplier, citing retaliation for US and Israeli military actions including airstrikes in Iran. Such cyberattacks serve psychological purposes, allowing Iran limited military means to demonstrate that pro-Iranian forces can impose material costs on Western nations and allies. By operating under a grassroots pro-Palestinian resistance guise, Iranian state actors conduct destructive operations while maintaining plausible deniability.

Read at Ars Technica