Inside the Octopus: How a Telegram Hack Targeted Israel’s Political Elite

It started with a single message-one that Naftali Bennett, former Israeli Prime Minister, never sent. Within hours, rumors swirled: had the man who once led Israel fallen victim to a sophisticated cyberattack? As details emerged, it became clear that this was no ordinary account compromise, but a calculated move in a digital war where reputations, secrets, and political futures hang in the balance.

Unpacking the Telegram Breach

The hacking of Naftali Bennett’s Telegram account isn’t just a personal privacy violation-it’s a flashpoint in the escalating cyber hostilities between Israel and Iran. The attack, publicly claimed by the group “Handala,” was part of an operation they call “Octopus,” a pointed reference to Bennett’s own rhetoric describing Iran’s far-reaching influence as an octopus with tentacles extending into Israel’s affairs.

While initial reports suggested Bennett’s iPhone or other devices might have been compromised, the former Prime Minister was quick to clarify: the breach was limited to his Telegram account, likely accessed through alternative attack vectors such as phishing or credential stuffing. No evidence has surfaced so far that his smartphone or other hardware was directly infiltrated.

Handala’s data dump included contacts, private photos, and correspondence. Some of the leaked material was genuine, but the hackers also mixed in forged documents and doctored images-like a manipulated photo showing Bennett alongside Israel’s founding Prime Minister David Ben-Gurion, a meeting that never happened. The deliberate blend of fact and fiction is a classic disinformation tactic, designed to sow confusion and erode trust.

Bennett has denounced the hack as both a criminal act and a political maneuver, suggesting that adversaries are using the incident to derail his potential return to high office. With elections looming and Bennett seen as a credible challenger to Benjamin Netanyahu, the timing of the attack has raised suspicions of foreign and domestic interference alike.

Israeli authorities have launched a formal investigation, but the episode has already sent shockwaves through the political landscape. The hack underscores the vulnerability of public figures-even those with robust security protocols-to persistent, high-level cyber threats. It also highlights how digital platforms like Telegram, prized for their encrypted messaging, can become entry points for attackers if account credentials are exposed or social engineering succeeds.

Conclusion

The breach of Naftali Bennett’s Telegram account is a stark reminder: in today’s interconnected world, the battle for political power is increasingly fought in cyberspace. As Israel braces for another heated election, the lines between foreign sabotage, political rivalry, and digital crime are blurring. For Bennett-and for every leader in the cyber age-the next attack may be just a message away.

WIKICROOK

• Phishing: Phishing is a cybercrime where attackers send fake messages to trick users into revealing sensitive data or clicking malicious links.
• Credential Stuffing: Credential stuffing is when attackers use stolen usernames and passwords from one site to try and access accounts on other sites.
• Disinformation: Disinformation is deliberately false or misleading information spread to deceive the public, often amplified through digital platforms and social media.
• Attack Vector: An attack vector is the method or pathway hackers use to gain unauthorized access to a computer system, network, or sensitive data.
• Encrypted Messaging: Encrypted messaging scrambles messages so only the intended recipient can read them, protecting privacy and preventing unauthorized access.