Reports Archive:
Research & Analysis
A comprehensive collection of technical reports, security analyses, and in-depth research. Exploring the depths of digital security with a critical lens.
Sort:
Citizens Privacy Rights123 min read
Right to Privacy in Iran
A legal analysis with a focus on surveillance
Read Report
Technology Supply Chains12 min read
Direct-to-cell offers Iranians future hope, not a fix today
Republishing Iran International’s report on Direct-to-Cell technology and examining the hopes, technical barriers, and security risks of direct mobile-to-satellite connectivity in Iran
Read Report
Technology Supply Chains16 min read
Reviewing the Security Ambiguities of the Iranian Daria Bond Phone
Multiple points of security risk and lack of transparency in the supply chain of the “Bond 5G” phone model under the Iranian brand “Daria”
Read Report
Digital Censorship & Repression11 min read
“Crowdsourced” Espionage: a New Strategy of the IRGC for Tighter Digital Repression
A review of the Islamic Republic’s digital surveillance patterns in suppressing citizen, building political cases, threatening citizens’ safety through digital tools
Read Report
Destructive Cyber Operations31 min read
From Attack to Containment: The Shared Failure Point in Iran’s Banking System
Iran’s banking disruption exposed a crisis in the middle layer of e-banking, where shared service cores, emergency isolation, uneven recovery and technical opacity all converged.
Read Report
Digital Monitoring & Interception11 min read
Taliban App Raises New Questions About Iran’s Surveillance Technology Exports
A static technical analysis of RTA Keyboard identified multiple security and privacy issues that raise serious concerns about user safety, transparency, and data protection.
Read Report
Destructive Cyber Operations25 min read
Unraveling the Islamic Republic’s Quarter Century Quest for Spherical Implosion
Was Fast16 the malware that struck at the core of the Islamic Republic’s implosion type nuclear weapons program, beyond what Stuxnet ever targeted?
Read Report
Citizens Privacy Rights9 min read
Filimo: How Iran's Leading Streaming Platform Exposes Users to Credential Theft and Cross-Border Profiling
A privacy audit of Filimo reveals plaintext credential storage, global analytics transmission, and embedded location surveillance, all operating within Iran's compelled-access jurisdiction where no independent data protection authority exists
Read Report
Digital Censorship & Repression25 min read
The New Map of Tiered Internet Access in Iran
From White Lines to Internet Pro: Reselling Blacklist Censored Internet to Authenticated Users
Read Report
Citizens Privacy Rights9 min read
Bitbaan Anti-Malware: When a Security App Becomes a Liability in Iran's Surveillance Landscape
A privacy audit of Bitbaan Anti-Malware reveals hidden camera capture, weak password encryption, network scanning, and extensive tracking, privacy failures that are particularly dangerous in an app that Iranian users trust to protect them, operating within a jurisdiction with no independent data protection oversight
Read Report
Citizens Privacy Rights8 min read
BadeSaba Calendar: Privacy Risks of a Calendar App Operating Under Iran's Surveillance Framework
A blackbox privacy audit of BadeSaba Calendar reveals aggressive tracking and broken cryptography, vulnerabilities made far more consequential by the app's operation within a jurisdiction where the state maintains documented capabilities to compel data access without independent oversight
Read Report
Destructive Cyber Operations17 min read
Attack Without a Hack: How a Piece of Malware Took the MahsaAlert Domain Off the Internet
Attackers created a piece of malware and registered the MahsaAlert domain as its C2 server, deceiving global security systems and causing this civil alert platform to be blocked.
Read Report