Popular prayer program becomes propaganda pusher after reported Israeli hack
(2026/03/02)
- Reference: 1772482296
- News link: https://www.theregister.co.uk/2026/03/02/iran_prayer_app_propaganda_hack_israel/
- Source link:
Imagine your favorite app encouraging you to surrender during a war. That's happening right now in Iran.
With the onset of open warfare, Israel [1]reportedly hacked the popular prayer calendar app BadeSaba to distribute messages that, in another era, might have taken the form of pamphlets dropped from planes.
According to [2]Reuters , app users received notifications stating "It's time for reckoning" and urging members of the military to join the opposition to the regime.
[3]
The message, [4]it's [5]claimed , was titled "Help has arrived."
[6]
[7]
Hamid Kashfi, a security researcher and DarkCell founder, in a social media [8]post said the app is an interesting target for reasons beyond its high number of downloads, said to be around 37 million.
"Users of the app are particularly religious people and have [a] higher chance to be also pro-regime and within [the] body of the army," he wrote. "One important but seemingly ignored fact about this app is that it requests location access to operate."
[9]
The availability of user location data and other app telemetry, he suggested, "can be (ab)used in many different and interesting ways!"
The app's maker did not immediately respond to a request for comment.
Lukasz Olejnik, independent consultant, author, and visiting senior research fellow at the Department of War Studies at King's College London, [10]says that he predicted this very scenario in his 2024 book Propaganda.
[11]
He characterized the message campaign not as a cyberattack but as a psychological operation intended to influence Iranian society and the country's security forces.
Olejnik told The Register in an email that there's very little app users can do beyond being skeptical about what gets displayed on their screens – advice that may be difficult to follow given the expectations for push notifications.
[12]Iran all but vanishes from the global internet amid US-Israel strikes
[13]UK Businesses told to brace cyber defenses amid Iran conflict risk
[14]Scammers try to SIM-swap Dubai citizens hours after Iranian missile strikes
[15]AWS Middle East disrupted after 'objects struck datacenter' amid Iran war
"Push notifications are trusted by design," said Olejnik. "The entire model assumes that if you installed an app, the messages it sends are legitimate."
For software developers, he said, the lesson is that notification infrastructure becomes a high-value target, particularly during conflicts.
"Keep in mind that apps may delegate push delivery to third-party services or platform-level infrastructure, and then it's even more complex," he said. "Developers and operators should map how they use it and update their risk assessments accordingly. Especially those with significant user bases."
Olejnik said that this is a consequence of infrastructure control. "Push notifications create an infrastructural, logical channel between the media or apps, and the user," he said. "It's an issue of architecture." ®
Get our [16]Tech Resources
[1] https://www.wsj.com/livecoverage/iran-strikes-2026/card/israel-hacked-popular-iranian-prayer-app-to-urge-defections-resistance-wtYyb29CmKrTXoJBIV3C
[2] https://www.reuters.com/business/media-telecom/hackers-hit-iranian-apps-websites-after-us-israeli-strikes-2026-03-01/
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2aaYWjzTVGpasd3I8RggOUwAAAss&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://x.com/Adi13/status/2027645088919154943?s=20
[5] https://x.com/saikirankannan/status/2027645532437680568?s=20
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aaYWjzTVGpasd3I8RggOUwAAAss&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aaYWjzTVGpasd3I8RggOUwAAAss&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[8] https://x.com/hkashfi/status/2028266700622135382?s=20
[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aaYWjzTVGpasd3I8RggOUwAAAss&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[10] https://x.com/lukOlejnik/status/2027985865872379996?s=20
[11] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aaYWjzTVGpasd3I8RggOUwAAAss&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[12] https://www.theregister.com/2026/03/02/iran_internet_blackout/
[13] https://www.theregister.com/2026/03/02/ncsc_security_iran/
[14] https://www.theregister.com/2026/03/02/dubai_iran_sim_swap/
[15] https://www.theregister.com/2026/03/01/asia_tech_news_roundup/
[16] https://whitepapers.theregister.com/
With the onset of open warfare, Israel [1]reportedly hacked the popular prayer calendar app BadeSaba to distribute messages that, in another era, might have taken the form of pamphlets dropped from planes.
According to [2]Reuters , app users received notifications stating "It's time for reckoning" and urging members of the military to join the opposition to the regime.
[3]
The message, [4]it's [5]claimed , was titled "Help has arrived."
[6]
[7]
Hamid Kashfi, a security researcher and DarkCell founder, in a social media [8]post said the app is an interesting target for reasons beyond its high number of downloads, said to be around 37 million.
"Users of the app are particularly religious people and have [a] higher chance to be also pro-regime and within [the] body of the army," he wrote. "One important but seemingly ignored fact about this app is that it requests location access to operate."
[9]
The availability of user location data and other app telemetry, he suggested, "can be (ab)used in many different and interesting ways!"
The app's maker did not immediately respond to a request for comment.
Lukasz Olejnik, independent consultant, author, and visiting senior research fellow at the Department of War Studies at King's College London, [10]says that he predicted this very scenario in his 2024 book Propaganda.
[11]
He characterized the message campaign not as a cyberattack but as a psychological operation intended to influence Iranian society and the country's security forces.
Olejnik told The Register in an email that there's very little app users can do beyond being skeptical about what gets displayed on their screens – advice that may be difficult to follow given the expectations for push notifications.
[12]Iran all but vanishes from the global internet amid US-Israel strikes
[13]UK Businesses told to brace cyber defenses amid Iran conflict risk
[14]Scammers try to SIM-swap Dubai citizens hours after Iranian missile strikes
[15]AWS Middle East disrupted after 'objects struck datacenter' amid Iran war
"Push notifications are trusted by design," said Olejnik. "The entire model assumes that if you installed an app, the messages it sends are legitimate."
For software developers, he said, the lesson is that notification infrastructure becomes a high-value target, particularly during conflicts.
"Keep in mind that apps may delegate push delivery to third-party services or platform-level infrastructure, and then it's even more complex," he said. "Developers and operators should map how they use it and update their risk assessments accordingly. Especially those with significant user bases."
Olejnik said that this is a consequence of infrastructure control. "Push notifications create an infrastructural, logical channel between the media or apps, and the user," he said. "It's an issue of architecture." ®
Get our [16]Tech Resources
[1] https://www.wsj.com/livecoverage/iran-strikes-2026/card/israel-hacked-popular-iranian-prayer-app-to-urge-defections-resistance-wtYyb29CmKrTXoJBIV3C
[2] https://www.reuters.com/business/media-telecom/hackers-hit-iranian-apps-websites-after-us-israeli-strikes-2026-03-01/
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2aaYWjzTVGpasd3I8RggOUwAAAss&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[4] https://x.com/Adi13/status/2027645088919154943?s=20
[5] https://x.com/saikirankannan/status/2027645532437680568?s=20
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aaYWjzTVGpasd3I8RggOUwAAAss&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aaYWjzTVGpasd3I8RggOUwAAAss&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[8] https://x.com/hkashfi/status/2028266700622135382?s=20
[9] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aaYWjzTVGpasd3I8RggOUwAAAss&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[10] https://x.com/lukOlejnik/status/2027985865872379996?s=20
[11] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_offbeat/front&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aaYWjzTVGpasd3I8RggOUwAAAss&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[12] https://www.theregister.com/2026/03/02/iran_internet_blackout/
[13] https://www.theregister.com/2026/03/02/ncsc_security_iran/
[14] https://www.theregister.com/2026/03/02/dubai_iran_sim_swap/
[15] https://www.theregister.com/2026/03/01/asia_tech_news_roundup/
[16] https://whitepapers.theregister.com/
There's very little app users can do beyond
that one in the corner
Not giving in to this fetish to UPDATE NOW! Don't stop to check release notes, UPDATE NOW!! Doesn't matter if this version doesn't fix any bugs, let alone any CVEs, UPDATE NOW!!!
Too slow, we just changed the background colour, you must UPDATE AGAIN, NOW!!!!
To heck with opportunities for State Hackers to get in and change the app, if you follow that advice you are less likely to be caught out when a perfectly useful app, which you paid for and everything, is bought out by some random company who suddenly fills it with ads, removes half the features you were using and generally takes the piss.
BTW, v17.3.5 is out, UPDATE NOW!!!!!
Help is on its way!
I think it would be hard for Iranians to be welcoming of the "help" after over a hundred little girls between the ages of 7-12 were killed in a bomb strike on an Iranian elementary school even if they wanted a change in the regime.