PanamaTimes

Sunday, Jul 06, 2025

Report: Iran’s Government Accesses Social Media Accounts of Detainees

Report: Iran’s Government Accesses Social Media Accounts of Detainees

As protests spread in Iran, some worry the government is using technology to access mobile applications to surveil and suppress dissent.
“They told me ‘Do you think you can get out of here alive? We will execute you. Your sentence is death penalty. We have evidence, we are aware of everything,’” said Negin, whose name CNN changed at her request, for her safety.

Negin, who says she has been accused by Iranian authorities of running an anti-regime activist group on Telegram (an allegation she denies), said she has “some friends” who were political prisoners. “They put in front of me transcribed printouts of my phone conversations with those friends,” she said, and “questioned me on what my relationship with those people were.”

Negin thinks Iranian agents hacked into her Telegram account on July 12, when she realized another IP address had accessed it. While Negin was in prison, she said, Iranian authorities reactivated her Telegram account to see who tried to contact her and reveal the network of activists with whom she was in touch.

Negin was one of hundreds of protesters detained at Iran’s notoriously brutal Evin prison in northern Tehran in the first few weeks of demonstrations following the death in custody of Mahsa Amini.

Amini, a 22-year-old woman, had been apprehended by Iran’s morality police for apparently not wearing her hijab properly.

Human rights activists inside and outside of Iran have been warning for years about the Iranian regime’s ability to remotely access and manipulate protesters’ cell phones. And tech companies may not be well equipped to handle such incidents, experts say.

Amir Rashidi, Director of Digital Rights and Security at the human rights organization Miaan Group, said the methods described by Negin match the Iranian regime’s playbook.

“I myself documented many of these cases,” he said. “They have access to anything beyond your imagination.”

The Iranian government may have used similar hacking tactics to surveil the Telegram and Instagram accounts of Nika Shahkarami, the 16-year-old protester who died after a demonstration in Tehran on September 20. The Iranian authorities have always denied any involvement in her death, but a previous CNN investigation found evidence suggesting she was detained at the protests shortly before she went missing.

Iranian authorities still have not responded to CNN’s repeated inquiries about Nika’s death.

At least one tech company, Meta, has now opened an internal inquiry into activity on Nika’s Instagram account after her disappearance, CNN has learned.

After Nika went missing, her aunt and other protesters told CNN that her popular Instagram and Telegram accounts had been disabled. A week later, her family learned that she was dead. But the mystery over who had deactivated her social media accounts remained.

On October 12, two of Nika’s friends noticed her Telegram account briefly back online, they told CNN. Nika’s Instagram account was also briefly restored on October 28, more than a month after her disappearance and death, according to a screengrab obtained and verified by CNN.

As with Negin’s case, the reactivation of Nika’s accounts raises questions about whether Iranian authorities were responsible for accessing her social media profiles, allegedly to phish other protesters or compromise her after her death.

“Telegram is everything in Iran,” explained Rashidi. “It was more than just a messaging app before being blocked and still they managed to maintain their presence in Iran by just simply adding a proxy option in the app.”

“If users don’t have access to anything because of censorship, they still have access to Telegram,” he continued. “As results there are a lot of users’ data in Telegram and that’s why the Iranian government is interested in hacking Telegram.”

There are different ways the government could gain access to a person’s accounts or their network of contacts, according to experts. Negin, for example, said authorities “kept creating Telegram accounts using my SIM card, in order to see who I am in contact with.” In other cases, authorities could attempt to co-opt the two-factor authentication process, which is designed to provide greater security by texting or emailing a login code.

“Usually what happens is, they do the target phone number, then they send a login request to Telegram,” Rashidi told CNN. “If you don’t have 2-step verification, then they will intercept your text message, read the login code and easily get into your account.”

That’s why some Iranian activists cheered when Google introduced Google Authenticator in the country in 2016. It’s a two-step verification process that adds a layer of security for mobile phone users.

Crucially, however, the Iranian regime doesn’t even need telecommunication companies to work with them, according to Rashidi. “The Iranian government is running the entire telecommunication infrastructure in Iran,” he said.
Newsletter

Related Articles

PanamaTimes
0:00
0:00
Close
U.S. Enacts Sweeping Tax and Spending Legislation Amid Trade Policy Shifts
AI Raises Alarms Over Long-Term Job Security
House Oversight Committee Subpoenas Former Jill Biden Aide Amid Investigation into Alleged Concealment of President Biden's Cognitive Health
OpenAI Secures Multimillion-Dollar AI Contracts with Pentagon, India, and Grab
Brazilian Congress Rejects Lula's Proposed Tax Increase on Financial Transactions
Landslide in Bello, Colombia, Results in Multiple Casualties
Papa Johns pizza surge near the Pentagon tipped off social media before Trump's decisive Iran strike
Juncker Criticizes EU Inaction on Trump Tariffs
Minnesota Lawmaker Melissa Hortman and Husband Killed in Targeted Attack; Senator John Hoffman and Wife Injured
Wreck of $17 Billion San José Galleon Identified Off Colombia After 300 Years
Sole Survivor of Air India Crash Recounts Escape
Coinbase CEO Warns Bitcoin Could Supplant US Dollar Amid Mounting National Debt
UK and EU Reach Agreement on Gibraltar's Schengen Integration
Israeli Finance Minister Imposes Banking Penalties on Palestinians
U.S. Inflation Rises to 2.4% in May Amid Trade Tensions
Trump's Policies Prompt Decline in Chinese Student Enrollment in U.S.
Global Oceans Near Record Temperatures as CO₂ Levels Climb
Trump Announces U.S.-China Trade Deal Covering Rare Earths
Smuggled U.S. Fuel Funds Mexican Cartels Amid Crackdown
Protests Erupt in Los Angeles with Symbolic Flag Burning
Trump Administration Issues New Travel Ban Targeting 12 Countries
Man Group Mandates Full-Time Office Return for Quantitative Analysts
JPMorgan Warns Analysts Against Accepting Future-Dated Job Offers
Builder.ai Faces Legal Scrutiny Amid Financial Misreporting Allegations
Japan Grapples with Rice Shortage Amid Soaring Prices
Goldman Sachs Reduces Risk Exposure Amid Market Volatility
HSBC Chairman Mark Tucker to Return to AIA as Non-Executive Chair
Israel Confirms Arming Gaza Clan to Counter Hamas Influence
Judge Blocks Trump's Ban on International Students at Harvard
Trump Proposes Travel Ban on 'Uncontrolled' Countries
Panama Port Owner Balances US-China Pressures
Trump Administration Accused of Obstructing Deportation Cases
Trump’s China Strategy Remains a Geopolitical Puzzle
Eurozone Inflation Falls Below ECB Target to 1.9%
Call for a New Chapter in Globalisation Emerges
Blackstone and Rivals Diverge on Private Equity Strategy
Mayor’s Security Officer Implicated | Shocking New Details Emerge in NYC Kidnapping Case
Bangkok Ranked World's Top City for Remote Work in 2025
Denmark Increases Retirement Age to 70, Setting a European Precedent
Netanyahu Accuses Western Leaders of 'Emboldening Hamas'
Escalating Trade Tensions and Market Reactions
OnlyFans Reportedly in Talks for $8 Billion Sale
JBS Gains Shareholder Approval for U.S. Stock Listing
Booz Allen Hamilton to Cut 2,500 Jobs Amid Federal Spending Reductions
Trump Signs Executive Orders to Accelerate Nuclear Energy Development
Harvard Temporarily Blocks Trump Administration's International Student Ban
Nippon Steel Forms Partnership with U.S. Steel, Headquarters to Remain in Pittsburgh
Trump Expands Tariff Threats to Apple and Samsung Devices
Oracle and OpenAI Plan $40 Billion Nvidia Chip Purchase for AI Data Center
Trump Threatens 50% Tariff on EU Goods, Markets React
×