Skip to content
October 26, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • News
  • Data Leak
  • Report: Iran could be secretly spying on millions of users in the US, UK and around the world through applications on Apple and Google’s app stores
  • Data Leak

Report: Iran could be secretly spying on millions of users in the US, UK and around the world through applications on Apple and Google’s app stores

Do Son February 17, 2018 3 minutes read
Iran
Add Daily CyberSecurity as a preferred source on Google

According to the British DailyMail, Iran may be cynically monitoring millions of users in the United States, the United Kingdom and around the world, drawing on some government-sponsored apps from Apple and Google Play. The news came from a report released Thursday by the National Reconciliation Coalition of government (NCRI), Iran’s anti-government political organization.

 

According to the report, the Islamic Revolution Guard (IRGC) has developed a number of Surveillance App applications that can be activated through the backdoor and uploaded to Apple, Google and the GitHub application platform in order to monitor and prevent the emergence of new political riots.

 

 

 

 

The report pointed out that Apple and Google Play Mall on a called Mobogram’s instant messaging application is the Iranian government research and development and monitoring of the spy App. Alireza Jafarzadeh, deputy director of NCRI’s Washington office, said: “The IRGC has targeted western networking technologies and targeted those trying to liberate their country, which is currently conducting a preliminary test of these apps on the Iranian people and, without hurdles, Its next target will be users in other countries. ”

 

According to analytics firm App Annie, Mobogram ranks 156 on the number of U.S. social networks App downloads in the Apple App Store. Pavel Durov, the founder of Telegram, a Russian end-to-end encrypted communications software, warned users that “users should avoid downloading Mobograms, which may be a security risk.”

Iran’s smartphone users have turned to Mobogram and other apps after Telegram was temporarily banned during the anti-government protest last December. Most Iranian users use Telegram to communicate, not Twitter or Facebook. The number of Telegram users in Iran is about 40 million, and the number of users outside Iran is about 45 million.

Durov also claimed that the Iranian government had wanted him to help the government use Telegram to monitor users, but he rejected the request. Family members living outside Iran often use Mobogram or other communication apps to connect with relatives living in the country. NCRI claims that those users are likely to be the victims of a large-scale Iranian military surveillance program that the Iranian government is using to monitor opponents and dissenters with malicious code embedded in the App.

WHAT APPS COULD BE VULNERABLE TO IRANIAN SURVEILLANCE?

In addition, according to NCRI, Mobogram is promoting with a “local mall” supported by IRGC, Café Bazaar. Café Bazaar is the imitation of Google’s Play Mall, which has thousands of App applications. Jafarzadeh said Iranian government can use the spy App to find out the user’s phone number, address and other sensitive information because they have access to the information on the user’s SIM card. NCRI believes the Iranian government has developed about 100 apps that embed malicious code, including Mobogram, Hotgram, Wispi and other communications software.

Source: dailymail

Related coverage

  • Privacy and Financial Security at Risk: McAfee Labs Warns of SpyLoan Applications
  • SpyCloud reveals over 721 million passwords exposed on the internet in 2022
  • The Grok Build Privacy Controversy: Unauthorized Repository Uploads
  • LockBit Ransomware Gang Exposes Boeing’s Data in Public Leak
  • Google Debunks False Gmail Breach Rumors as Credentials Leak Again
  • Mercor Data Breach Targets AI Supply Chain
Track all actively exploited CVEs →

Support Our Threat Intelligence

Find our threat intelligence and malware analysis helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: Iran

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 26, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 26, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 26, 2026
  • CVE-2026-106173CVSS 9.8
    A improper limitation of a pathname to a restricted directory (\'path traversal\') vulnerability in Fortinet FortiSIEM 7.5.0 may...
    Admin intel📅 Updated: Oct 25, 2026
  • CVE-2014-125133CVSS 8.7
    NativeChurch theme for WordPress before 1.6.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2015-20128CVSS 8.8
    FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate MSSQL queries...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2016-20104CVSS 8.7
    EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows unauthenticated attackers to...
    Watchtower Verified📅 Updated: Oct 24, 2026
  • CVE-2026-110447CVSS 9.2
    Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in...
    CISA KEV📅 Added to KEV: Oct 23, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-116237CVSS 9.3
    A vulnerability was found in Oray Pugongying X5 Pro 7.6.1. This affects an unknown part of the component...
    📅 Updated: Oct 26, 2026
  • CVE-2026-116235CVSS 9.4
    A flaw has been found in Oray Pugongying X5 Pro 7.6.1. Affected by this vulnerability is an unknown...
    📅 Updated: Oct 26, 2026
  • CVE-2026-116234CVSS 9.4
    A vulnerability was detected in Oray Pugongying X5 Pro 7.6.1. Affected is an unknown function of the file...
    📅 Updated: Oct 26, 2026
  • CVE-2026-116233CVSS 9.4
    A security vulnerability has been detected in Oray Pugongying X5 Pro 7.6.1. This impacts an unknown function of...
    📅 Updated: Oct 26, 2026
  • CVE-2026-116232CVSS 9.4
    A weakness has been identified in Oray Pugongying X5 Pro 7.6.1. This affects the function snmp_set of the...
    📅 Updated: Oct 26, 2026
  • CVE-2026-116231CVSS 9.4
    A security flaw has been discovered in Oray Pugongying X5 Pro 7.6.1. The impacted element is an unknown...
    📅 Updated: Oct 26, 2026
  • CVE-2026-66592CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in rtCamp Inc. rtMedia for...
    📅 Updated: Oct 26, 2026
  • CVE-2026-111497CVSS 9.2
    A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all...
    📅 Updated: Oct 26, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.