Iranian Hacker Group GhostSec Exposes Alleged Surveillance Software Used by FANAP Group

In a startling revelation, the hacker group GhostSec has disclosed the source code of various software packages, claiming that they are surveillance tools used by the Iranian government. The FANAP group, known for providing technology to financial services and the IT sector, has allegedly expanded its offerings to include a comprehensive surveillance system. GhostSec’s findings have raised concerns about privacy invasion and government monitoring of Iranian citizens.

Background on GhostSec and the FANAP Group

GhostSec is a prominent hacker group known for its commitment to human rights. The FANAP group, on the other hand, is an Iranian technology provider that has established its presence in the financial services and IT sectors. However, recent developments suggest FANAP’s involvement in developing surveillance software for the Iranian government.

Discovery of Surveillance Software within FANAP Software

On August 27, GhostSec revealed that it had discovered facial recognition capabilities and various other tools that invaded privacy within FANAP’s software. The implications of such technology being available to the Iranian government raise serious concerns about citizen surveillance.

Allegations against Pasargad Bank’s involvement

GhostSec specifically alleges that the surveillance software developed by FANAP was deployed across all branches of Iran’s Pasargad Bank. Pasargad Bank is renowned for its role as an investor in FANAP, making the claims of its involvement particularly concerning.

Details about the surveillance software’s architecture and components

Upon examining the leaked source code, GhostSec experts found that the software was built on a microservice architecture. It included Apache Kafka for real-time processing of video data, Redis and Postgres for storing metadata and analysis results, and services designed for system monitoring. These findings suggest the software’s advanced capabilities and potential reach.

Behnama: A Powerful Instrument of Surveillance

GhostSec highlights Behnama as more than just a tool. It is described as a powerful instrument used by the Iranian government, law enforcement agencies, and military personnel for surveillance purposes. This revelation further intensifies concerns about the extent and nature of citizen monitoring in the country.

GhostSec’s Motives for Exposing the Breach

GhostSec’s official statement regarding the breach aligns with its mission to uphold human rights. The hacker group aims to shed light on potential violations of privacy and advocate for the protection of individuals’ fundamental right to privacy.

GhostSec’s Method of Accessing the Source Code

In a message shared on Telegram, a member of GhostSec revealed that they had gained access to the FANAP infrastructure, enabling them to capture the source code. The method employed to expose the surveillance software highlights potential vulnerabilities in FANAP’s security measures.

FANAP’s Denial and Response to the Report

FANAP responded to the allegations made by GhostSec, denying any leak of their software’s source code. They dismissed the claims as lacking technical expertise and accused GhostSec of attempting to manipulate public opinion.

FANAP’s claims about the software’s functionality

FANAP argues that their software only possesses the ability to recognize faces that have been introduced to the device with the person’s presence and consent. They assert that their technology does not infringe on individual privacy, directly contradicting the concerns raised by GhostSec.

The exposure of alleged surveillance software used by FANAP and the Iranian government has sparked significant debate regarding privacy and citizen rights. GhostSec’s findings shed light on the potential invasion of privacy and prompt a reevaluation of the balance between national security and individual liberty. As this story continues to unfold, further investigations and discussions will be crucial in determining the extent of surveillance in Iran and its implications for human rights.

Explore more

What Businesses Need to Know About Customer Identity Verification

Modern verification toolkits have expanded beyond simple photo ID inspections to include facial biometrics, liveness detection, and automated identity APIs. This shift occurs at a time when digital interactions represent the primary touchpoint between companies and their clientele. In an era where many customers never physically enter a store or meet a representative, the pressure to establish trust is immense.

Is AI the End of Current Blockchain Cryptography?

Current Ethereum and Bitcoin addresses that have broadcast a transaction are more vulnerable because their public keys are already visible on the ledger. This revelation has sent ripples through the cryptographic community, challenging the long-held assumption that decentralized networks would have decades to prepare for the advent of quantum-scale attacks. Instead of waiting for a physically realized quantum computer, researchers

How Is Google Cloud Redefining Legacy IT With AI?

The ability to generate business cases for cloud migration in minutes is replacing the manual spreadsheet modeling that previously slowed down IT departments. This shift marks a fundamental change in how large-scale infrastructure overhauls are perceived by the executive suite, moving away from purely technical discussions to strategic business narratives. In the current landscape of 2026, the rapid adoption of

Top Data Classification Tools and Strategies for 2026

Relying solely on automated machine learning without providing clear policy guidance often results in over-classification, making the entire security system difficult for employees to use. In the current digital landscape of 2026, data classification has transcended its origins as a back-office administrative chore to become a critical pillar of modern cybersecurity and global regulatory compliance. As enterprises manage vast petabytes

Google Updates View-Through Conversion Logic for Demand Gen

The quest for absolute clarity in digital attribution has long been the holy grail for modern marketers seeking to justify their visual media spend across expansive digital ecosystems. The change to a one-pixel threshold moves view-through metrics further away from proving active engagement and closer to measuring mere exposure. This technical adjustment, arriving as part of a broader overhaul of