Iran-Linked Hackers Claim Control of US Security Drones Ahead of the World Cup Kickoff

The Handala collective says it slipped inside a fleet of FBI surveillance drones, flaunting clips and data it claims came from aircraft tasked with keeping World Cup venues safe. That would put facial and license plate recognition systems in play, if true. With Justice Department warnings following American-Israeli strikes on Tehran, federal officials have tightened airspace around matches and rethought tactics. Washington is dangling up to $10 million for a lead, even as analysts dissect the posted footage to determine what, if anything, was really hijacked.

The claims landed just as the World Cup got underway in North America. A cyber group aligned with Iran says it penetrated surveillance drones used by the FBI around match sites, accessing live video, facial recognition hits, and license plate reads. The group, identified as Handala by SITE Intelligence Group, tied its threat to games that began on June 11, 2026, warning that first-person-view drones could target team transports.

Hackers’ bold claims of infiltrating FBI drones

Handala published statements asserting months of access to federal drone feeds used for counterterrorism. The group threatened to exploit FPV drones, a style popular with hobbyists and some police units, to create chaos around tournament logistics. The posture taps into a broader fear: small aircraft are hard to track, they carry cameras or payloads, and they blend into crowded airspace near big events.

Security response and warnings from U.S. agencies

Federal officials have tightened aerial security around stadiums, with temporary flight restrictions and geofencing typical for major sports events. People familiar with current planning say the bureau has limited drone flights over sensitive perimeters while checks proceed. The U.S. Department of Justice and federal partners have repeatedly warned about Iranian-linked cyber activity targeting U.S. infrastructure, a risk that escalates during high-profile gatherings.

Doubts, evidence, and Handala’s history

Handala circulated clips it said came from compromised FBI drones. Analysts at SITE questioned the materials after tracing a widely shared video to a 2024 software vendor promo for a U.S. police department documenting tornado damage, not a federal drone breach. The group has previously claimed breaches tied to senior U.S. officials’ accounts, often aiming to hijack narratives around geopolitics and domestic security.

The U.S. government’s counterstrike: a multimillion-dollar reward

The U.S. Department of State is offering up to $10 million for information that identifies or locates the actors behind Handala’s operations. That bounty signals Washington’s posture: treat threats that intersect with national events as matters of public safety and foreign policy. For fans and host cities, the message is steady vigilance, layered defenses, and a sober read of what is performative bluster versus real operational access.