Iranian dissidents take over high-security servers of regime presidency

A group of Iranian dissidents, self-described as “GhyamSarnegouni” (meaning “Rise to Overthrow” in Farsi), has claimed responsibility for taking control of and defacing several Iranian presidency-linked websites on Monday. The dissidents have taken down these heavily protected websites, replacing images of Iranian regime Supreme LeaderAli Khameneiand PresidentEbrahim Raisiwith those ofMassoud Rajavi, the Leader Iranian Resistance, andMaryam Rajavi, the President-elect of the Iranian opposition coalition National Council of Resistance of Iran (NCRI). Other websites showed images of Khamenei and Raisi crossed out.

One of the sites even displayed the slogan “Death to Khamenei/Raisi! Hail to Rajavi!” This incident follows a previousdisruptionby the same group that targeted websites associated with the regime’s Foreign Ministry earlier this month. “GhyamSarnegouni” had reported they were able to obtain over 50 terabytes of data from the regime’s Foreign Ministry servers.

The regime has been the target of a series of damning and embarrassing hacks in recent times, including those targeting its nuclear program, state television signal, and even government surveillance cameras.

The dissident group has provided extensive details about today’s disruption and defacing of Iranian presidency-linked websites. These include access to top secret documents and defacings, such as:

Images of Iranian Resistance leadership and anti-regime slogans were sent to reporters and media outlets from the main email account of the regime’s presidency

The group obtained access to systems of the classified internal communications associated to the presidency and the government