The Lead
Yehia Hosseini Panjaki, a high-ranking Iranian intelligence official and the commander of the 'Khanzala' cyber-warfare group, was killed in a targeted strike in Tehran during the early days of Operation 'Roaring Lion'. Panjaki, who served as the deputy chief of internal security at Iran's Ministry of Intelligence, was previously sanctioned by the U.S. Treasury for human rights abuses. His death, which occurred in the Dardasht neighborhood of the Iranian capital, has been followed by public acknowledgments from sources linked to the Iranian security apparatus regarding his dual role as a state official and a cyber-insurgent leader.
New details have emerged regarding the identity and operational significance of Yehia Hosseini Panjaki, whose death in Tehran was recently confirmed. According to material reviewed by The Zioneer Intelligence Desk, Panjaki was not only a senior bureaucrat within the Iranian Ministry of Intelligence but also the clandestine commander of 'Khanzala', a hacker group that has aggressively targeted Israeli leadership and infrastructure. ### Dual Role and Sanctions Panjaki held the position of deputy chief of internal security at Iran's intelligence ministry, a department tasked with suppressing domestic dissent and managing counter-intelligence operations. In 2024, the U.S. Department of the Treasury imposed sanctions on him for his involvement in human rights abuses. Following these sanctions, U.S. authorities issued a wanted notice and offered a financial reward for information leading to his location. ### Operational Impact of Khanzala The group Panjaki led, Khanzala, has been a primary actor in the cyber-confrontation with Israel. Sources associated with the Islamic Revolutionary Guard Corps (IRGC) intelligence have now publicly acknowledged Panjaki's leadership of the group. Khanzala is credited with several high-profile data breaches, including the exfiltration of information from the mobile devices of senior Israeli figures such as former Prime Minister Naftali Bennett, IDF Chief of Staff Herzi Halevi, and senior official Tzachi Braverman. ### Strategic Context and Elimination Panjaki was killed in an Israeli strike in the Dardasht neighborhood of Tehran during the opening phase of Operation 'Roaring Lion'. His elimination marks a significant disruption to the coordination between Iran's formal intelligence ministries and its 'independent' cyber proxies. The public disclosure of his identity by Iranian-linked channels suggests a shift in the regime's handling of its fallen cyber operatives, moving from total secrecy to a form of posthumous recognition. This development highlights the integration of cyber warfare into the direct kinetic conflict currently unfolding between Israel and the Iranian regime.
5 developments
- The Zioneer Intelligence Desk
- Rubio says Iran wants to abandon extremism, US ready to help — but won't accept Hormuz tolls
- Israeli officials deny Reuters report of IDF withdrawal from Lebanon
- Commentator Bitton Rosen provides new details of fatal operational accident in southern Lebanon
- Woman and five children rescued from violent captivity in remote village after over a decade