Popular prayer program becomes propaganda pusher after reported Israeli hack
Article Date: 2026-03-02T20:11:36+00:00
Author: Thomas Claburn
Summary
Reports say Israeli actors compromised the widely used Iranian prayer calendar app BadeSaba to send push notifications into users’ phones urging military personnel to defect and join opposition forces. Notifications with headlines such as “Help has arrived” and “It’s time for reckoning” were delivered to users, according to Reuters and other outlets. Security researchers note the app’s large user base (reported ~37 million) and the fact it requests location access, making it a high-value target for influence operations. Experts describe the incident less as a classic cyberattack and more as a psychological operation exploiting trusted push-notification infrastructure.
Key Points
- Reportedly, Israeli operators used the BadeSaba prayer app to deliver messages encouraging defections and resistance inside Iran.
- Notifications included phrases like “Help has arrived” and “It’s time for reckoning,” aimed at influencing military and pro-regime users.
- The app has a large, religious user base and requests location data — attributes that make it attractive for targeted influence.
- Security experts characterise the campaign as a psychological operation (psyop) leveraging push-notification trust, not just a technical intrusion.
- Researchers warn that notification delivery systems and third-party push services are high-value infrastructure that developers should assess in risk plans.
Why should I read this?
Because your phone can be weaponised — seriously. This isn’t just drama about an app; it’s a neat, modern example of how trusted notifications can be turned into wartime propaganda. If you’re interested in privacy, app risk, or how tech shapes conflict, this is a quick, useful read we’ve done the heavy lifting on for you.
Context and Relevance
The incident fits a growing pattern where state and state-aligned actors use digital platforms for influence and disruption during conflicts. Push notifications are implicitly trusted, so compromising that channel can have outsized psychological effects compared with other forms of messaging. For developers, platform operators and security teams, the case underlines the need to map push-delivery pathways, audit third-party providers, and consider how app permissions (notably location access) might amplify an app’s value as a target.