A broadcast signal intrusion targeted Iranian state television channels, interrupting their programming with content related to widespread civil unrest. The attack, confirmed on Sunday, January 18, 2026, replaced scheduled content with images and videos from recent local demonstrations.
This Badr satellite breach represents an operational security issue for Iran's state broadcaster, which relies on the infrastructure for national distribution.Â
During the disruption, a message from Iran's exiled Crown Prince, Reza Pahlavi, was featured. The video directly appealed to the Iranian public to join the protest movement and encouraged members of the military to align with the demonstrators.Â
The incident highlights the use of technical exploits to counter state-sanctioned narratives, as opposition movements succeeded in bypassing the government's stringent information controls by broadcasting this message on official state channels through a hack.
The hacking of Iranian state TV channels underscores the digital dimension of the ongoing conflict between the government and opposition groups. By commandeering a key satellite distribution network, the hackers could deliver unfiltered, anti-government messaging directly to a national audience.Â
This event not only serves as a significant victory for the opposition but also exposes vulnerabilities within Iran's state-controlled media apparatus.Â
The broadcast of protest footage and calls for dissent on state-run frequencies represents a direct challenge to the regime's authority and control over public information.
A SpearSpecter cyberespionage campaign linked to the IRGC was observed this month, targeting high-value officials.