Adalat Ali
Attribution profile
- Type
- Activist
- Location
- Iran
- Known incidents
- 4 incidents
- Sources
- 3 sources
- First seen
- 2021-08-24
- Last seen
- 2023-02-11
- Updated
- 2026-10-03 01:35
- Aliases
- 3 aliases
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
Adalat Ali, also known as Ali's Justice and Edalat-e Ali, is an Iran‑based hacktivist group that has conducted disruptive cyber operations against Iranian state institutions. The group’s activities have focused on hijacking live television broadcasts and web streams of the Islamic Republic of Iran Broadcasting to air anti‑regime slogans and calls for protest, as well as breaching the internal CCTV system of Evin prison to leak videos documenting inmate abuse. Their observed tactics include signal hijacking of TV and web streams, unauthorized access to prison surveillance networks, and the use of Telegram channels to claim responsibility and disseminate messages. No malware families or specific initial‑access vectors are described in the available sources. The group operates as a hacktivist collective with no publicly asserted ties to a state sponsor or criminal consortium. Representative operations include the February 2023 disruption of President Ebrahim Raisi’s Revolution Day speech on state TV, the October 2022 broadcast that displayed Supreme Leader Ali Khamenei in cross‑hairs alongside images of Mahsa Amini, the February 2022 hijack of a live sports web stream urging nationwide protests, and the August 2021 leak of Evin prison CCTV footage showing guard beatings and suicide attempts.
Incidents
Attributed incidents are available to members.
4 incidentsSources
Sources available to members: 3 sources.