Iranian Hacker Group GhostSec Exposes Alleged Surveillance Software Used by FANAP Group

In a startling revelation, the hacker group GhostSec has disclosed the source code of various software packages, claiming that they are surveillance tools used by the Iranian government. The FANAP group, known for providing technology to financial services and the IT sector, has allegedly expanded its offerings to include a comprehensive surveillance system. GhostSec’s findings have raised concerns about privacy invasion and government monitoring of Iranian citizens.

Background on GhostSec and the FANAP Group

GhostSec is a prominent hacker group known for its commitment to human rights. The FANAP group, on the other hand, is an Iranian technology provider that has established its presence in the financial services and IT sectors. However, recent developments suggest FANAP’s involvement in developing surveillance software for the Iranian government.

Discovery of Surveillance Software within FANAP Software

On August 27, GhostSec revealed that it had discovered facial recognition capabilities and various other tools that invaded privacy within FANAP’s software. The implications of such technology being available to the Iranian government raise serious concerns about citizen surveillance.

Allegations against Pasargad Bank’s involvement

GhostSec specifically alleges that the surveillance software developed by FANAP was deployed across all branches of Iran’s Pasargad Bank. Pasargad Bank is renowned for its role as an investor in FANAP, making the claims of its involvement particularly concerning.

Details about the surveillance software’s architecture and components

Upon examining the leaked source code, GhostSec experts found that the software was built on a microservice architecture. It included Apache Kafka for real-time processing of video data, Redis and Postgres for storing metadata and analysis results, and services designed for system monitoring. These findings suggest the software’s advanced capabilities and potential reach.

Behnama: A Powerful Instrument of Surveillance

GhostSec highlights Behnama as more than just a tool. It is described as a powerful instrument used by the Iranian government, law enforcement agencies, and military personnel for surveillance purposes. This revelation further intensifies concerns about the extent and nature of citizen monitoring in the country.

GhostSec’s Motives for Exposing the Breach

GhostSec’s official statement regarding the breach aligns with its mission to uphold human rights. The hacker group aims to shed light on potential violations of privacy and advocate for the protection of individuals’ fundamental right to privacy.

GhostSec’s Method of Accessing the Source Code

In a message shared on Telegram, a member of GhostSec revealed that they had gained access to the FANAP infrastructure, enabling them to capture the source code. The method employed to expose the surveillance software highlights potential vulnerabilities in FANAP’s security measures.

FANAP’s Denial and Response to the Report

FANAP responded to the allegations made by GhostSec, denying any leak of their software’s source code. They dismissed the claims as lacking technical expertise and accused GhostSec of attempting to manipulate public opinion.

FANAP’s claims about the software’s functionality

FANAP argues that their software only possesses the ability to recognize faces that have been introduced to the device with the person’s presence and consent. They assert that their technology does not infringe on individual privacy, directly contradicting the concerns raised by GhostSec.

The exposure of alleged surveillance software used by FANAP and the Iranian government has sparked significant debate regarding privacy and citizen rights. GhostSec’s findings shed light on the potential invasion of privacy and prompt a reevaluation of the balance between national security and individual liberty. As this story continues to unfold, further investigations and discussions will be crucial in determining the extent of surveillance in Iran and its implications for human rights.

Explore more

Are Retailers Ready for the AI Payments They’re Building?

The relentless pursuit of a fully autonomous retail experience has spurred massive investment in advanced payment technologies, yet this innovation is dangerously outpacing the foundational readiness of the very businesses driving it. This analysis explores the growing disconnect between retailers’ aggressive adoption of sophisticated systems, like agentic AI, and their lagging operational, legal, and regulatory preparedness. It addresses the central

What’s Fueling Microsoft’s US Data Center Expansion?

Today, we sit down with Dominic Jainy, a distinguished IT professional whose expertise spans the cutting edge of artificial intelligence, machine learning, and blockchain. With Microsoft undertaking one of its most ambitious cloud infrastructure expansions in the United States, we delve into the strategy behind the new data center regions, the drivers for this growth, and what it signals for

What Derailed Oppidan’s Minnesota Data Center Plan?

The development of new data centers often represents a significant economic opportunity for local communities, but the path from a preliminary proposal to a fully operational facility is frequently fraught with complex logistical and regulatory challenges. In a move that highlights these potential obstacles, US real estate developer Oppidan Investment Company has formally retracted its early-stage plans to establish a

Cloud Container Security – Review

The fundamental shift in how modern applications are developed, deployed, and managed can be traced directly to the widespread adoption of cloud container technology, an innovation that promises unprecedented agility and efficiency. Cloud Container technology represents a significant advancement in software development and IT operations. This review will explore the evolution of containers, their key security features, common vulnerabilities, and

Ireland Ends Data Center Ban with Tough New Power Rules

As the artificial intelligence boom strains global power grids to their breaking point, Ireland has pivoted from a complete ban on new data centers to a revolutionary policy that redefines the cost of digital expansion. This analysis examines the landmark decision to end the de facto moratorium on new grid connections, detailing a stringent new framework that transforms data centers