Handala says it papered Tel Aviv overnight; police found flyers at several addresses

Israel Police and the Shin Bet opened a joint investigation into flyers found on 9 November in mailboxes at several addresses in northern Tel Aviv, carrying a QR code pointing to a website police described as featuring “threatening content.” A group claiming to be Handala took responsibility. Fars, the IRGC-affiliated agency, reported that dozens of Handala operatives remained on the streets until dawn distributing hundreds of thousands of leaflets bearing the hashtags “No Water” and “No Electricity,” and threatened Israeli power plants, refineries and desalination facilities in what it called a “final warning.” The group’s statement, via Times of Israel, read: “On that day, not a single power station, oil refinery or water desalination facility will remain in the occupied territories. From south to north, your energy and water arteries will shatter like glass.”

The arithmetic is the story. Two orders of magnitude separate “hundreds of thousands of leaflets” and “dozens of operatives” from the confirmed footprint of several mailboxes in one district. bne IntelliNews, reporting from its Tehran bureau on the Hamshahri Online version, noted the claim “could not be independently verified” and that Handala’s earlier work “centred on hacking and data leaks, so a street operation in Israel’s commercial capital would mark a move into physical action.” bne ties the conditional threat to Israeli strikes on 18 March that it says knocked out four refineries at Asaluyeh. The partisan OSINT newsletter Treadstone 71 — flagged here as partisan — assesses it “likely (55 to <85 percent)” that a hired local rather than an Iranian officer delivered the flyers, and puts at “a roughly even chance (45 to <55 percent)” that the operators behind the page ran the original Handala leaks, “given how freely the name is borrowed.”

Assessment: This is a claim about an event, amplified by state-adjacent media, resting on a confirmed physical artefact of trivial scale. That combination is the signature of influence work rather than capability demonstration: the leaflet costs almost nothing, the Fars write-up does the actual work, and the deterrent message lands in Israeli media regardless of how many mailboxes were touched. Two things would settle it. Shin Bet arrests of local couriers would deflate the “dozens of operatives” line and confirm the hired-courier hypothesis. An actual incident in Israeli water or power operational technology would retire the question entirely. Neither has happened as of Friday.