Iranian hackers linked to a recent U.S. cyberattack have been running a broader intimidation campaign, which involved death threats and suggesting they have ties to a Mexican cartel. The FBI seized four domains used by actors tied to Iran's Ministry of Intelligence and Security, including sites linked to the pro-Iranian "hacktivist" group Handala. The domains were allegedly used for "attempted psychological operations," including claiming cyberattacks, leaking stolen data and calling for the killing of journalists, dissidents, and Israelis. The campaign indicates Iran's cyber playbook is moving beyond hacking companies and is now using cyberattacks to manipulate public opinion.