Overview
- The BadeSaba calendar and prayer app, with more than five million downloads, was compromised to push messages telling security forces to lay down arms and join the people, including alerts such as “Help has arrived,” according to multiple reports.
- The operation coincided with defacements of Iranian news sites and sharp drops in national connectivity recorded at 0706 GMT and 1147 GMT, said Kentik’s director of internet analysis.
- Multiple outlets, citing The Wall Street Journal and cybersecurity analysts, reported Israeli involvement in the app hack, though Israel and U.S. Cyber Command have not publicly confirmed responsibility.
- Flashpoint reported additional messages on Sunday, including surrender instructions and guidance for gathering points, while warning of increased activity by pro-Iran cyber personas coordinating online.
- Analysts at Sophos, CrowdStrike, and Anomali said the incident raises the chance of retaliatory operations—ranging from DDoS and data-wiper attacks to hack-and-leak campaigns—against Israeli, U.S., and commercial targets.