World Cup Story Feed / 世界杯事情流
World Cup Story Feed / 世界杯事情流
On one side, the FBI apprehends an illegal immigrant with a drug record in Atlanta's Centennial Park; on the other, the Iran linked "Handala" hacking group claims to have secretly infiltrated the FBI's drone systems, threatening to use FPV drones to crash into team buses during the World Cup. The SITE Intelligence Group points out, however, that the so called "trophy" video is merely a commercial promo from 2024. The FBI's shield is becoming a spear that could strike the players.
On the afternoon of June 12, 2026, Atlanta. Centennial Olympic Park was packed with people—those in red were Spanish fans, those in blue were Cape Verde supporters. A few miles away, inside Mercedes-Benz Stadium, the two teams were battling it out for their first group stage points. The official Fan Festival was proceeding as planned, with a DJ playing music on stage and the score rolling on the big screen.
No one noticed the parking lot a few hundred meters away.
A man named Lorenzo Rojas-Martinez was holding a remote control, sending a civilian drone into restricted airspace. FBI agents quickly subdued him, Atlanta police confiscated the device on the spot, and federal prosecutors filed charges that same day.
This Rojas-Martinez had quite a background: a Mexican national, an illegal immigrant, with a prior conviction for cocaine trafficking. He had been deported from the U.S. twice and had slipped back in twice. The criminal complaint stated that on June 12—the day after the World Cup officially kicked off—he operated a drone in restricted airspace, recording video of the Fan Festival.
A drug trafficker who had repeatedly crossed the U.S.-Mexico border was now standing in a no-fly zone of one of the world's biggest sporting events, holding a remote control.
Coincidence? Too coincidental.
On the same day, the FBI released some data: since the World Cup began, 21 unauthorized drones had been seized. What does 21 mean? FIFA officially allows teams to bring their own drones for tactical recording, and media areas have compliant aerial drones. 21 unauthorized drones means that for every compliant drone caught, there was a black-market one flying. Where did these black drones come from? Why risk flying them into stadiums during the World Cup? The FBI didn't say, but the answer likely isn't "a hobbyist with an itch."
The FBI had issued a drone no-fly zone over stadiums, and all U.S. venues hosting World Cup matches had entered "anti-small aircraft" mode.
This opening scene brings to mind the 1996 Atlanta Olympics' Centennial Olympic Park bombing. Twenty-eight years ago, a pipe bomb exploded in a midnight crowd, creating one of the bloodiest pages in Olympic history. Twenty-eight years later, the FBI's security playbook had swapped bomb disposal for "catching quadcopters," and this time, the supporting actor was an illegal immigrant with a drug record. Twenty-eight years later, counterterrorism had shifted from "watching people" to "watching the sky," but the script's sense of panic was just as strong.
More ironically, within the logic of the FBI's system, someone like Rojas-Martinez was precisely the type meant to be captured by drones—his face, his license plate, his movements were supposed to be in the drone's database. Yet here he was, using a drone to challenge that very system.
But this is just the tip of the iceberg.
Beneath the surface lies an even more absurd script: a hacker group claiming ties to Iran, called "Handala," had allegedly infiltrated the FBI's drone system months before the World Cup. They possessed facial recognition data and license plate reading data and threatened to use FPV drones to crash into "certain teams'" buses during the tournament.
Don't think this is just a movie plot; this is what Handala claimed.
"You better strengthen your World Cup security... FPV drones are everywhere, and you never know when one will directly crash into your team's bus."
"We really don't like some of those teams."
In plain English: I can see your faces, I can capture your license plates; I may not act, but I have the capability.
Handala's statement was first exposed by the SITE Intelligence Group, which monitors jihadist network activity. This group isn't new in the pro-Iranian hacker circles, claiming to fight for Palestine. Cybersecurity experts generally believe it is linked to the Islamic Republic of Iran. SITE is an expert in jihadist monitoring, and its exposure of Handala was intended to tip off relevant U.S. authorities.
But SITE's report came with a rather ironic footnote.
Handala released a video claiming to show footage from a "hacked drone," featuring aerial shots of a U.S. city with narration about "leaked FBI confidential data." SITE investigated and found the video was not a hacker's trophy—it was a commercial promotion from December 2024 for a software platform, which U.S. police used for tornado disaster monitoring.
In short, Handala had passed off an ad as a trophy.
In other words, this group claiming to hack into FBI drones couldn't even gather their own material—either lazy or truly incompetent. An organization claiming to "access FBI drone footage and data" had its most impressive "evidence" be a product ad from 2024. With that level, even Chinese spy dramas would find it amateurish.
But the FBI and State Department clearly aren't treating this as a joke.
The U.S. State Department has put up a $10 million reward for information identifying or locating Handala members. This is one of the highest-level bounties offered by the State Department for a single hacker group, showing the White House's anxiety. FBI Director Kash Patel's personal email was also on the list of targets—Handala claimed they had hacked it too. The FBI neither confirmed nor denied it.
This "can neither be disproven nor confirmed" state is the most nerve-wracking in information warfare: the opponent's authenticity is dubious, but you can't take the risk. The FBI can't afford to bet wrong even for a second—the cost of a mistake could be players' lives, the collapse of the entire event.
What's even more unsettling is the timeline.
In February 2026, the U.S. and Israel launched airstrikes on Tehran. The aftershocks lasted until the World Cup's opening. In March, the U.S. Justice Department warned that domestic critical infrastructure might face retaliation from Iranian-backed hacker groups. Handala's statement fell right into this window. February airstrikes, March warnings, June opening-day threats—this timeline is like a taut bowstring, with Handala's statement as the arrow on it.
From a geopolitical perspective, the 2026 World Cup was never just a sporting event. Co-hosted by the U.S., Canada, and Mexico, it was the first to expand to 48 teams, spanning three countries. 48 teams, 3 countries, 16 cities—FIFA had expanded the cake to its max, also stretching security pressure to its limit.
Handala's statement tore a hole in this script: you throw a party, we hold a funeral.
Ironically, Iran's team qualified this time. Their first group match was in Los Angeles against New Zealand. With FBI drones potentially becoming "targets," Iranian players entering a Los Angeles stadium—this image itself carries an eerie tension.
Do you send drones to monitor Iran's training? If so, that's Handala's "use FBI drones to attack Iran," giving them material. If not, the FBI's security logic has a gap. Either way, it provides fodder for Handala. This is the classic Schrödinger's dilemma—the FBI's choice itself writes Handala's script.
What to watch next? How the FBI handles Iran's opening match—either deploying massive human security or stubbornly continuing drone patrols. Either response is the "overreaction" Handala wants to see.
This is the classic "Schrödinger's dilemma" in security.
You don't know if your opponent is truly capable or just bluffing. You don't know if that video is a trophy or a commercial. You don't know if the "hack" is marketing hype or a real penetration. But you can't gamble.
So the FBI chose "kill it with fire": nationwide drone no-fly zones, 21 unauthorized drones seized, an illegal immigrant pinned in a parking lot, a $10 million bounty posted.
Behind this lies a deeper issue: when the tools used to protect major events—drone surveillance, facial recognition, license plate reading—become targets themselves, the "spear and shield" logic of security is flipped.
Over the past decade, drones were the FBI's shield. They flew above, watching people below, collecting face and plate data to filter out suspects. Now Handala tells you: I can touch your shield's control system, I can turn the shield into a spear. The shield becomes a spear, and the spear becomes a shield again—this act is increasingly like Russian nesting dolls.
The threat to team buses is unsettling not because FPV drones can precisely hit a fast-moving bus—that requires extremely low latency and high control precision, which amateurs can't achieve, and even professionals might struggle on city streets.
What's truly unsettling is the "indifference."
Handala's statement carries no "warning" or "ultimatum" tone; it simply states: I can, I may not, but I could. This is a new type of information warfare—not about winning, but about making you unsure whether to be tense.
This "Schrödinger's fear" is the true enemy of World Cup security. You don't know if you should be afraid, so you budget for the worst case. Budgeting for the worst case, in turn, shows Handala that its threats work, encouraging a repeat next time. It's a self-fulfilling cycle.
The 2026 World Cup, from planning to opening, has been mired in controversy—expansion to 48 teams, player fitness, travel stress across three countries, broadcast revenue sharing, Qatar's legacy, immigration policy, and the FBI's security script.
Now, a new character has entered the script: Handala.
It might be a genuine hacker or a clout-chasing marketing account. But either way, Homeland Security, the FBI, and FIFA must treat it as a real hacker—because the cost of betting wrong once is players' lives.
On the same day the FBI pinned Rojas-Martinez down and seized the 21st drone, Spain and Cape Verde drew in Mercedes-Benz Stadium. In Los Angeles, South Korea and Mexico each secured opening victories. Iranian players were likely making final preparations for their first match against New Zealand.
This is the first week of the 2026 World Cup: whistles still blow on the field, but off it, drones are pinned down by the FBI in parking lots; the drones meant to protect the event might already be claimed as "taken over" by a group linked to Tehran.
The FBI has subdued the drones on the ground, but cannot contain the ghost named Handala in the sky. A billion-dollar expanded World Cup, in its opening week, has been cornered into the most awkward corner of security logic by a $10 million bounty and a 2024 ad drone.
In Handala's script, there is no word for "unity."