Handala does not need to put a hole in a fuselage to move a news cycle. In late December 2025 the Iran-aligned crew posted a metaphorical warning about Benjamin Netanyahu’s planned flight to Florida for a meeting with Donald Trump at Mar-a-Lago. The language was theater. The timing was not. Days later the same channel claimed the iPhone of Tzachi Braverman, Netanyahu’s chief of staff and ambassador-designate to Britain, and branded the dump “Bibi Gate.” Israel’s Prime Minister’s Office answered with a narrow sentence: no indication, at that stage, that the mobile itself was compromised, investigation open. Haaretz later treated the contact-list exposure around Braverman, former Prime Minister Naftali Bennett, and former justice minister Ayelet Shaked as a mapping wound even while official Israel argued over which device had actually fallen.
ガルフストリームのミサイルではない話です。 コンタクトブックの広告として、ヘッド・オブ・グオーバメント・イテナリーを使用したリークショップです。 関連する技術クレームは、AEGIS Allianceの報告書でライブ Braverman電話クレーム. aegisアライアンス ハッカーニュース 各ダンプをサンプルが一致するまでのクレームとして扱います。 その標準はまだ適用されます。
ベール警告、その後、実際の旅程
On December 27, 2025, Handala’s channels circulated language that Israeli outlets read as a threat against the aircraft Netanyahu would use to reach Palm Beach. Arutz Sheva and other Hebrew desks carried the post the same day. The group did not publish a flight number or a weapons claim. It published atmosphere: we see the plane, we see the meeting, we are already inside the circle that books the seats. That is psychological operations dressed as operational intelligence. It still forced security desks to treat a Telegram caption as an aviation problem.
Netanyahu went anyway. He left from an Air Force base rather than Ben Gurion, without a press pool on the jet, and sat with Trump at Mar-a-Lago on December 29. The public choreography was flattery and a demand that Hamas disarm. The private choreography was a prime minister who would not advertise a wheels-up time after an Iran-tied crew had spent forty-eight hours talking about his flight path. A threat that never becomes a crater can still change how a head of government travels. That is the first half of the story.
The second half started twenty-four hours earlier on the same accounts. Handala said it had Braverman’s iPhone 16 Pro Max. It posted photographs, office paper, and a tease of a contact list it said ran more than a hundred pages. It promised evidence of “vile financial and moral acts.” What it actually put on the table, in the first hours, looked like a directory and a mood board. Calcalist noted that the early files showed less misconduct than the caption claimed. Captions are not forensics. Directories are still dangerous.
旅行の警告がまだサイバーストーリーである理由
Telegram チャネルからの Aviation 脅威は読みやすくなります。 ミニスターのゲートキーパーの電話帳はいません。 漏れた連絡先が本物の場合、すべての番号はターゲティングリストです。 エルサレムのポスト PMO denial を実行しました。 ハレッツ, on January 7, 2026, described the later contact leak as a gold mine for anyone building a graph of Israeli officialdom and foreign leaders. The magazine reconstruction named the scale: roughly 2,400 contacts from Braverman’s book, layered with numbers pulled from Bennett and Shaked. The names in those graphs were not only Israeli. They included foreign officials and industry figures whose personal lines should never have sat in a public dump.
Bennett had already said, in mid-December, that only his Telegram account was hit, not his phone. Handala claimed more. On January 3 the group posted dozens of photos and videos it attributed to Shaked’s device. On January 8 it claimed it had filmed outside the home of a senior Mossad officer. Each of those posts is a separate authentication problem. Together they are a campaign. The flight warning was the billboard. The contact books were the product.
A chief of staff’s address book is a map of who can reach the prime minister and who sits one hop off that desk. Braverman was also in line for the London embassy. A book like that is useful to an intelligence service even if the handset itself never left a Faraday bag. A backup, a paired laptop, a staffer’s cloud, a synced messaging app — any of those can bleed a directory without the PMO’s “phone compromised” sentence becoming true. That is why the denial and the leak can live in the same week.
バックドロップとしてガザ, 証拠ではなく
Handala presents itself as a pro-Palestinian crew named for the barefoot cartoon boy Naji al-Ali drew as a witness to dispossession. The branding is Iran-tied and timed to Israel’s war in Gaza. That war, which multiple states, UN experts, and legal scholars have called a genocide, is the political weather the group exploits. Branding does not authenticate a file. It does explain why a leak about Netanyahu’s inner circle lands when aid trucks are being stopped and when Israeli fire has continued through a ceasefire that was supposed to hold after October 10, 2025.
AEGIS Allianceは、そのキャンペーンを別のファイルで追跡しました。 Qatar-Egypt-Jordanは、ストップファイアストライキの復活 そして、 37の援助グループで禁止. パレスチナ人のために戦うと主張するハッカーチャンネルはまだPDFを証明する必要があります. 病院を爆破する政府は、自分自身のゲートキーパーを確保する必要があります。 どちらの事実も同じ記事で印刷することができます。
Israeli security writers have called Handala a mask for Iranian psychological warfare. That may be true. It does not make the contact graph imaginary. Haaretz’s January investigation is the closest thing the public has to a third-party check, and that check treated the numbers as real enough to worry about surveillance of officials and of the foreigners in their phones. A PMO sentence about one iPhone does not unwind a magazine reconstruction of three address books.
ダンプをアンプにすることなく読み込む方法
The correct newsroom posture is ugly and short. Quote the claim. Quote the denial. Say what was actually posted. Say what has been matched. Refuse to treat a countdown clock on Telegram as a confirmed hit on an aircraft. Refuse to treat a PMO line as a forensic report. The flight did take off. The meeting did happen. The contact lists, according to Haaretz, did circulate. Those three sentences are the verified spine.
Everything else is method. Handala wants the method to be panic: the plane is watched, the chief of staff is owned, the next drop will be worse. Official Israel wants the method to be shrug: no indication, moving on, the ambassador-designate still has a job. The public interest sits between those two scripts. A state fighting a war that has killed tens of thousands of Palestinians is also a state whose senior phone books appear to have been mapped by an adversary. That is not a reason to cheer the adversary. It is a reason to stop pretending that operational security and propaganda are the same skill.
デスクをフォローしている読者 国際ニュース file already know the pattern. Claim, denial, partial confirmation, next dump. The Florida warning was the hook. The Braverman book was the payload. The payload is what remains on the record after the plane landed at Palm Beach and the cameras packed up. Until a lab or a court matches a file to a device, The AEGIS Alliance will keep the captions in quotes and the itinerary in the past tense. The threat against the flight did its job without ever needing to become a wreckage photo. That is the part of the story official Israel would like to treat as a metaphor. Directories of live numbers are not metaphors.
