TI Mindmap HUB
Threat Intelligence Report

HEAVYGRAM: A Telegram-based Surveillance Backdoor Linked to Handala Hack

๐Ÿ“… September 17, 2026 ๐Ÿ“ฐ www.group-ib.com ๐Ÿ” 0 CVE(s) referenced

HEAVYGRAM is a sophisticated, Telegram-based Windows backdoor attributed to Iran-linked Handala Hack, actively used since late 2023 to surveil dissidents and journalists by enabling remote command execution, data theft, and persistent access through encrypted Telegram channels.

unclassified

Sign in to access the full report including:
detailed analysis, IOCs, MITRE ATT&CK mapping, and STIX bundle.

๐Ÿ” Sign In to Read Full Report

You'll need to accept our Terms of Service to access the platform.

๐Ÿ“Š Visual Mindmap
๐ŸŽฏ IOC Extraction
โš”๏ธ MITRE ATT&CK TTPs
๐Ÿ“ฆ STIX 2.1 Bundle