The Iran-linked cyber organization Handala has claimed to infiltrate FBI drones deployed for security at the World Cup. The group threatened to target team buses as the tournament began this Thursday across the United States, Canada, and Mexico.

Handala's claim of infiltrating FBI facial recognition drones

The pro-Palestine cyber threat group known as Handala alleges it has gained access to FBI drones equipped with license plate screening and facial recognition technology. according to the report, these unmanned aerial vehicles (UAVs) were deployed by the FBI to protect host stadiums and fan events from unauthorized aircraft and for counterterrorism purposes.

Handala warned that first-person view (FPV) drones are ubiquitous and could potentially be positioned near team buses. The group claimed to have obtained access to images and suspect lists for months leading up to the tournament, which saw the United States Men's National Team prepare for a Friday match against Paraguay.

The $10 million bounty and the Kash Patel email leak

This threat follows a pattern of aggressive targeting of U.S. officials by Handala. In March, the group claimed to have hacked the email account of FBI Director Kash Patel, releasing personal and professional correspondence dating from 2010 to 2019. The scale of these operations has prompted the State Department to offer a reward of up to $10 million for information that leads to the identification of Handala members.

The Justice Department has previously warned that Iranian actors might launch cyberattacks following the U.S.-Israeli strikes on Tehran in February.. This geopolitical friction has transformed the digital landscape into a secondary battlefield, where high-profile sporting events are used as leverage for political signaling.

From Arizona to Tijuana: Iran's displaced training camp

The tension between Washington and Tehran has manifested physically on the pitch . The Iranian national football team was forced to move its training base from Arizona to Tijuana due to the ongoing conflict with the United States. As reported, the squad has remained largely silent since arriving for the tournament last Sunday, reflecting the precarious nature of their participation.

The displacement of the Iranian team underscores how the World Cup is being used as a mirror for Middle East instability. The tournament, intended as a global celebration, is instead highlighting the deep diplomatic rift between the U.S. and Iran.

Omar Artan's Miami airport denial and Mexico City riots

The security threats from Handala are only one part of a broader collapse in tournament stability. somali referee Omar Artan, a top African official, was removed from the FIFA list after U.S. authorities denied him entry at a Miami airport . An official from the Donald Trump administration claimed the denial was based on Artan's alleged ties to terror organizations.

Simultaneously, the tournament opener in Mexico City—where Mexico defeated South Africa 2-0—was marred by violence. Riot police used tear gas against thousands of protesters who were marching to highlight poor labor conditins and missing citizens in Mexico. These events, combined with widespread visa and entry issues for journalists and fans, have cast a shadow over the event's logistics.

Why SITE Intelligence Group disputes the leaked footage

Despite the alarms raised by the hackers, the validity of the breach remains unverified. While Handala published photos and footage they claimed were stolen from FBI drones, SITE Intelligence Group, which monitors jihadist movements, has disputed those claims. It remains unclear if the imagery was actually sourced from FBI hardware or if it was a sophisticated fabrication intended to create panic.

The FBI has not officially confirmed the extent of the breach, leaving a critical gap in the public's understanding of whether the tournament's aerial surveillance is actually compromised or if Handala is engaging in psychological warfare .