Hackers Compromise Evin Prison CCTV, While a CCTV Exploit Is Offered on the Darknet
Summary
The hacktivist group Edalat-e Ali claimed responsibility for accessing Evin Prison’s CCTV and leaking videos and documents. DarkOwl also found a low-cost CCTV exploit for sale on a darknet marketplace, but could not confirm it was used in the prison attack.
Key points
- Edalat-e Ali claimed it attacked Evin Prison’s systems; the article reports leaked CCTV videos and documents, including records suggesting possible access to internal data storage.
- A vendor on the We The North darknet marketplace offered a 2021 CCTV exploit for $10.50, claiming it was delivered through a malicious PDF and two Python scripts.
- DarkOwl said it could not confirm whether the listed exploit was used against Evin Prison.
- The article cites the earlier Verkada camera-system breach as another example of compromised IoT security systems and notes that a compromised administrator credential was suggested as a possible entry point.
- DarkOwl assessed with medium confidence that We The North was likely related to the Canadian Headquarters marketplace, which had reportedly exit-scammed and later resurfaced.
Article Details
- Victim Organization
- Evin Prison
- Incident Type
- Unauthorized access to the prison's CCTV system, with possible access to internal data storage systems and subsequent leaking of videos and documents.
- Data Types Exposed
- CCTV video footage
- Prison documents
- Political prisoner records (identified in the group's statement)
- Affected Data Size
- The group claimed to have hundreds of gigabytes of data; the article does not confirm this volume.
- Operational Impact
- The article reports that the prison CCTV system was compromised and leaked videos appeared. It does not describe broader operational disruption.
- Ransom Or Extortion
- None reported.
- Claim Status
- confirmed