Iranian Hacker Group GhostSec Exposes Alleged Surveillance Software Used by FANAP Group

In a startling revelation, the hacker group GhostSec has disclosed the source code of various software packages, claiming that they are surveillance tools used by the Iranian government. The FANAP group, known for providing technology to financial services and the IT sector, has allegedly expanded its offerings to include a comprehensive surveillance system. GhostSec’s findings have raised concerns about privacy invasion and government monitoring of Iranian citizens.

Background on GhostSec and the FANAP Group

GhostSec is a prominent hacker group known for its commitment to human rights. The FANAP group, on the other hand, is an Iranian technology provider that has established its presence in the financial services and IT sectors. However, recent developments suggest FANAP’s involvement in developing surveillance software for the Iranian government.

Discovery of Surveillance Software within FANAP Software

On August 27, GhostSec revealed that it had discovered facial recognition capabilities and various other tools that invaded privacy within FANAP’s software. The implications of such technology being available to the Iranian government raise serious concerns about citizen surveillance.

Allegations against Pasargad Bank’s involvement

GhostSec specifically alleges that the surveillance software developed by FANAP was deployed across all branches of Iran’s Pasargad Bank. Pasargad Bank is renowned for its role as an investor in FANAP, making the claims of its involvement particularly concerning.

Details about the surveillance software’s architecture and components

Upon examining the leaked source code, GhostSec experts found that the software was built on a microservice architecture. It included Apache Kafka for real-time processing of video data, Redis and Postgres for storing metadata and analysis results, and services designed for system monitoring. These findings suggest the software’s advanced capabilities and potential reach.

Behnama: A Powerful Instrument of Surveillance

GhostSec highlights Behnama as more than just a tool. It is described as a powerful instrument used by the Iranian government, law enforcement agencies, and military personnel for surveillance purposes. This revelation further intensifies concerns about the extent and nature of citizen monitoring in the country.

GhostSec’s Motives for Exposing the Breach

GhostSec’s official statement regarding the breach aligns with its mission to uphold human rights. The hacker group aims to shed light on potential violations of privacy and advocate for the protection of individuals’ fundamental right to privacy.

GhostSec’s Method of Accessing the Source Code

In a message shared on Telegram, a member of GhostSec revealed that they had gained access to the FANAP infrastructure, enabling them to capture the source code. The method employed to expose the surveillance software highlights potential vulnerabilities in FANAP’s security measures.

FANAP’s Denial and Response to the Report

FANAP responded to the allegations made by GhostSec, denying any leak of their software’s source code. They dismissed the claims as lacking technical expertise and accused GhostSec of attempting to manipulate public opinion.

FANAP’s claims about the software’s functionality

FANAP argues that their software only possesses the ability to recognize faces that have been introduced to the device with the person’s presence and consent. They assert that their technology does not infringe on individual privacy, directly contradicting the concerns raised by GhostSec.

The exposure of alleged surveillance software used by FANAP and the Iranian government has sparked significant debate regarding privacy and citizen rights. GhostSec’s findings shed light on the potential invasion of privacy and prompt a reevaluation of the balance between national security and individual liberty. As this story continues to unfold, further investigations and discussions will be crucial in determining the extent of surveillance in Iran and its implications for human rights.

Explore more

Ethereum Tests Glamsterdam Upgrade Amid Market Volatility

The activation of the Glamsterdam upgrade on the Sepolia testnet marks a critical phase in Ethereum’s infrastructure scaling as the network tests a gas limit increase from 60 million to 200 million. This substantial expansion of the gas limit represents a calculated gamble on the robustness of current hardware, aimed at accommodating a new wave of high-throughput decentralized applications. While

How to Design and Optimize AI Prompts for Production

The shift from experimental chatbots to high-scale enterprise intelligence systems in 2026 has transformed prompt engineering from a creative writing exercise into a disciplined branch of software engineering. The most effective production prompts use structural separation to distinguish between trusted system instructions and untrusted content from user inputs or retrieved documents. When an application processes thousands of model calls against

What Are the Best Email Marketing Tools for SMBs in 2026?

Small businesses often choose Constant Contact because it offers an extensive library of templates and specialized tools for managing event registrations and ticketing directly through emails. However, the broader landscape of digital outreach has shifted significantly, transforming email from a simple messaging tool into a sophisticated infrastructure for revenue growth and long-term customer retention. In 2026, the success of a

EY Breach Exposes Goldman Sachs and Man Group Client Data

Administrative IT tickets used for routine tax services inadvertently served as a repository for sensitive client data that was eventually stolen by hackers. This security failure at Ernst & Young (EY) has sent ripples through the financial sector, as it compromised the personal information of high-net-worth individuals associated with Goldman Sachs and the London-based hedge fund Man Group. While these

New Phishing Campaign Impersonates AI Tools to Steal MFA Codes

The campaign exploits the established trust that advertising agencies place in AI tools to bypass multi-factor authentication protocols that were previously considered secure. This sophisticated operation, identified in late 2026, represents a significant shift in the threat landscape, moving away from generic banking lures and toward the highly specialized tools used by modern marketing professionals. By impersonating platforms such as