Iran Police Uses Surveillance Tool To Monitor Prisoners After Release
Researchers at the Lookout Threat Lab have discovered a new Android surveillance tool attributed to the Islamic Republic's Police (FARAJA).
Researchers at the Lookout Threat Lab have discovered a new Android surveillance tool attributed to the Islamic Republic's Police (FARAJA).
Since 2023, security and intelligence researchers have described the malware as an Android botnet and ransomware.
Lookout researchers evaluate that BouldSpy includes ransomware code, but it is unused and nonfunctional, indicating ongoing development or misdirection by the actor.
“BouldSpy has victimized more than 300 people, including minority groups such as Iranian Kurds, Baluchis, Azeris, and possibly Armenian Christian groups,” said Lookout in a statement.
It appears that the spyware was also used to monitor and counter illegal trafficking activities related to weapons, drugs, and alcohol.
To further monitor the target after release, FARAJA likely installs BouldSpy on devices obtained during detention, adds Lookout.
Many of the malware's activities took place during protests following the death in custody of Mahsa Amini in 2022.
“The first locations exfiltrated from the victims are, with few exceptions, concentrated near Iranian provincial police stations, Iranian Cyber Police stations, Law Enforcement Command facilities, and border control posts. Based on this, we theorize that a victim’s device is confiscated once detained or arrested, and then subsequently physically infected with BouldSpy.”
It is still not clear how many people were detained during the nationwide protests in Iran. While thousands of young and teenage protesters were arrested in street demonstrations, hundreds of political activists, journalists and writers or artists have also been detained.
Following Cohen's recent state visit to Azerbaijan, the Knesset members in a letter delivered to Cohen’s office asked the Israeli government to “pressure Iran to stop oppressing the Azeri minority in northwest Iran” based on a request by the Jewish community in Azerbaijan.
Before a scheduled speech at the Anti-Defamation League, Pahlavi strongly condemnedthe action of the Israeli lawmakers.
“The verbal assault on Iran’s territorial integrity by 32 members of the Israeli parliament is completely unacceptable and a service to the interests of the anti-Iranian Islamic Republic regime.”
Also, in a statement published on Twitter Sunday, the diaspora political group (7th Aban Front in Persian) said the Knesset members’ letter regarding “the Azeri minority” in Iran is “a clear case of action against Iran's existence”.
“Solidarity for a Free Iran considers this letter a hostile act against the Iranian nation and strongly condemns it,” the statement said.
“It is noteworthy that the letter of these Knesset members is in sheer contradiction with the statements made by Israeli government officials regarding friendship between the two nations of Iran and Israel during the recent visit of Prince Reza Pahlavi,” Solidarity for Free Iran said.
Prince Reza Pahlavi, a leading opposition figure, had visited Israel earlier this month and met with Israeli officials including Prime Minister Benjamin Netanyahu. This was the first time a prominent Iranian political figure had paid a public visit to Israel.
The group also stressed its belief in friendly relations with all countries and fighting against “reactionary discourses such as antisemitism” in the post-Islamic Republic Iran and condemned the Iranian regime’s animosity toward Israel but added that they would not allow “any country or political group to take advantage of such principles to spread hate and contentiousness against the Iranian nation.
The Knesset members accused the Iranian regime of “carrying out a policy of cultural genocide by restricting the right of members of the Azeri minority to study and spread its heritage, to teach its language and even to register children with Azeri national names.”
Around a quarter of Iran’s population is Turki-speaking Azari (in Iran the word is Azari – not Azeri), with analysts and activists disagreeing over the closeness of their cultural-linguistic links to their neighbors to the north.
It should be noted that Supreme Leaser Ali Khamenei and many past and current high-ranking Iranian officials come from the Azari community.
The letter said the Jewish community of Azerbaijan is “very concerned” about the persecution of the said ethnic minority in Iran and stressed that the country of Azerbaijan is one of the most important strategic allies of Israel in the region.
“Obtaining international support as broad as possible for the national aspirations of the people of South Azerbaijan (term used by Baku for Iran’s Azarbaijan) will be a fatal blow to the Ayatollah regime, and establishment of the sovereign state of South Azerbaijan,” they wrote.
Supporting the separation of what they called South Azerbaijan from Iran would also be “an appropriate response on the level of political activism to the subversion of the Ayatollah regime” against Israel.
Tensions have been high between Tehran and Baku, an Israeli ally since November 2022 when both sides accused each other of engaging in terrorism and espionage. Tehran has also accused Baku of harboring Israeli intelligence and military elements that plan to use its territory in a possible attack against Iran’s nuclear facilities.
Solidarity for a Free Iran was founded by prominent political activists after a gathering of political and civil activists from the Iranian diaspora in Brussels in late October, less than three months after Mahsa Protests began and spread across the country.