Iran-linked hacking group Handala published a vaguely threatening poem referring to Prime Minister Benjamin Netanyahu's trip to the United States in a post on X/Twitter on Saturday.
The tweet opened with the phrase "Flight BB Gate," a potential play on words. BB, or Bibi, is a common nickname for Netanyahu, and "gate" is often used in international discourse as a hint at an affair or scandal. Handala may be attempting to link the prime minister's flight to a problematic or sensitive incident, but it did not specify the circumstances.
Handala’s poem continues to describe "Flight BB Gate" as it "rises above the clouds,” referencing the physical act of travelling via airplane.
The air travel of senior government officials is a commonly invoked motif for hostile cyber organizations, because such trips combine complex security systems and encrypted communication into a situation that often draws broad public interest. The mere mention of the flight allows the organization to insert its message into the public discourse without directly declaring its intentions.
Handala’s use of the following phrase, “encrypted currents stir quietly among the watchers and the watched,” includes a clear allusion to the cyber world. It references the reality of encrypted information traffic; information intentionally made difficult to “watch” by those who may not wish to be “watched.”
The hacking group makes no explicit claim of hacking, but invokes an impression of presence or awareness of sensitive information passing through communication networks.
'Sometimes, secrets take flight'
“Layers of protection tighten” may be an allusion to the multi-layered security system that surrounds government officials like the prime minister. Handala’s wording does not claim that any protection or security was breached, but places an implicit question mark regarding the effectiveness of the layers of protection.
The phrase “sometimes, secrets take flight too” follows, which expands the allusion. Not only do people fly, but secrets, documents, or digital information can also fly in a metaphorical sense.
Handala then mentioned the flight “leaving trails only the most attentive can see,” perhaps referencing concepts from the world of metadata and digital logs, hinting at traces that are not visible to the general public, but to those who are familiar with information systems and know where to look.
Towards the end, Handala directly addressed Netanyahu. “And Bibi, it seems you’re carrying some rather interesting souvenirs with you this time.” The term “souvenirs” is used here as a general metaphor for sensitive or embarrassing information, without specifying its content. The ambiguity allows for multiple interpretations and strengthens the psychological effect of the message.
The signature “Tik Tok… Tik Tok” evokes a familiar element in messages of this type, conveying a countdown and time pressure, without specifying a date or expected action. The use of this expression could be intended to leave the reader in a state of anticipation for what may be coming next.
Handala's pattern of psychological warfare
In recent years, Handala has frequently published claims on social media about hacking, obtaining sensitive information, and possessing embarrassing materials, mainly against Israeli targets.
Its activity is characterized by a combination of cyber attacks, publications, and vague statements and formulations designed to generate public resonance even when there is no public proof of the information in its possession.
The organization previously claimed that it had hacked into Naftali Bennett's cell phone, an announcement that received widespread media attention but proved untrue.
In the case of Saturday’s poem, too, the post does not provide concrete information, but rather relies on wording that leaves the meaning open to interpretation.
The reference to Netanyahu's flight is made through wordplay and images from the world of cyber and security. There is no mention of physical action or a concrete date, but rather an attempt to create tension and uncertainty.
Handala practices a pattern of action in which the threat itself serves as a central tool in psychological warfare, even without full disclosure of materials.