Karma

Karma is an Iranian-linked hacktivist persona active since at least 2022, conducting hack-and-leak and defacement operations targeting Israeli organizations. The group publishes stolen data via Telegram and claims responsibility for intrusions into Israeli companies, using the persona to create psychological pressure while maintaining plausible deniability for the Iranian state. Karma operations share timing, targeting, and operational patterns with other Iran-linked personas active during the same period, including Handala and Cyber Toufan, suggesting a coordinated broader Iranian influence and disruption campaign against Israel.