GhyamSarnegouni — Hacktivist Profile
GhyamSarnegouni ("Uprising Till Overthrow" / "Rise to Overthrow") is a Farsi-language hacktivist persona that has run a series of hack-and-leak operations against Iranian government targets since surfacing on Telegram on January 26, 2022. Its defacements have displayed images of MEK/NCRI leaders Massoud and Maryam Rajavi in place of Iranian officials, and outside observers widely describe it as MEK/NCRI-aligned, though the group has not officially confirmed that affiliation and its operators' location has not been publicly established. Independent analysts who reviewed its leaked material — including large caches purportedly from Iran's Foreign Ministry and presidential office — assessed the documents and intrusions as likely genuine.Also tracked as
Uprising Till Overthrow, Uprising Until Overthrow, Rise to Overthrow, Ghyam Sarnegouni, Ghiam Sarnegouni, Qiam Sarnegouni
Countries linked to this actor
- Iran targets