From CTF to Civil Service: How Iran Recruits Hackers Through the Game

Man

Professional
Messages
3,087
Reaction score
627
Points
113
The Iranian Academy turned out to be a cover for replenishing the ranks of cyber intelligence.

The Raavin Academy, which is officially engaged in cybersecurity training, actually recruits hackers to work for Iran's Ministry of Intelligence. Iran International spoke about the key figures of a group of government hackers from Iran.

Two years ago, when mass protests began in Iran, hackers helped the government identify and suppress protesters. In November 2022, the US Department of State imposed sanctions on the Raavin Academy for the participation of its employees in the repression. Later, in a report by the UN Human Rights Council, the Academy was named as one of the participants in human rights violations in Iran.

New information reveals that hackers are being recruited under the guise of a cyber academy to work for the Ministry of Intelligence. The recruitment process is disguised as "technology Olympiads", which are organized by the scientific department of the presidential administration and the technology park. The competition selects the most promising specialists who will become "friendly hackers" working in the interests of the country.

eqy24q10grc06x49jtkswch8g40i18my.png


The history of the academy begins in 2019, when two young employees of the Ministry of Intelligence registered the non-profit organization "Avai Houshmand Ravin". The NGO's official goal was to teach cybersecurity, but in fact, the academy became a training center for hackers who support the actions of the Iranian special services.

Iran International has obtained data on 16 key employees of the academy, who act under the cover of teachers and board members. Employees are engaged in money laundering and recruiting new members of groups.

Among the founders of the academy is its current head, Majid Mostafawi, who was previously a member of the management of the Abrarovan company, which provided Internet censorship in Iran. Under his leadership, hackers from the academy carried out cyberattacks on the Turkish ministries of foreign affairs and defense.

The other founder is Farzin Karimi, who previously chaired the academy's board of directors and now works as a faculty member. Karimi was also responsible for a series of cyberattacks on Saudi Arabia's oil facilities.

Another key member of the group is Parsa Sarrafian, who is actually Hossein Siahpush, the leader of the Darkbit hacker group that attacked the Technion, a university in Haifa in 2023, and previously claimed responsibility for attacks on the Tel Aviv City Hall and Israeli health systems.

The leaders of the academy are agents of the Islamic Republic engaged in cyberpiracy and recruitment of personnel for the regime. They are no longer anonymous individuals with pseudonyms, but well-known figures associated with the Academy of the Ministry of Intelligence and serving the purposes of the government. Hacker groups linked to the Raavin Academy have carried out cyberattacks on systems in Italy, Algeria, Jordan, Turkey, Saudi Arabia, Iraq and Pakistan.

Source
 
Top