Hacktivists Hijacked Iran ’S State TV to Air Anti-Regime Messages and an Appeal to Protest From Reza Pahlavi

Why It Matters

The breach reveals critical vulnerabilities in Iran’s state‑media infrastructure and could amplify domestic dissent, influencing the trajectory of ongoing protests and regional stability.

Key Takeaways

• Badr satellite hijacked, aired anti-regime messages
• Broadcast lasted about ten minutes, 9:30 p.m. local time
• Reza Pahlavi urged protests and military defection
• Hack highlights Iran’s broadcast security gaps
• Occurred alongside renewed internet throttling in Iran

Pulse Analysis

The hijacking of Iran’s Badr communications satellite on Jan 18, 2026 exposed a rare breach of state‑run broadcast infrastructure. Hackers seized control of the uplink, inserted a ten‑minute feed and replaced regular programming with footage of global solidarity protests and a recorded appeal from exiled Crown Prince Reza Pahlavi. Technical analysts note that the Badr satellite, operated by the Islamic Republic’s Ministry of Information and Communications Technology, relies on legacy encryption, making it vulnerable to sophisticated signal‑injection attacks. The incident underscores the growing convergence of cyber‑espionage and information warfare in the Middle East.

Pahlavi’s message called on Iranians to sustain street demonstrations and urged the armed forces to side with civilians, a direct challenge to the regime’s monopoly on force. By broadcasting on the very channels the government uses to shape public perception, the hack amplified dissent and provided a symbolic rallying point for protesters already confronting a severe internet shutdown. While the reach of the ten‑minute clip was limited by the rapid re‑capture of the satellite, its psychological impact may reverberate through diaspora networks and social‑media platforms that continue to relay the footage.

The episode raises strategic questions for Tehran’s cyber‑defense posture and for foreign actors monitoring Iran’s stability. Strengthening satellite encryption, diversifying transmission paths, and establishing rapid incident‑response teams become urgent priorities to prevent future manipulations. For investors and multinational firms operating in the region, the hack signals heightened operational risk and the potential for sudden information disruptions that could affect market sentiment. As state media remain a critical tool for regime legitimacy, any breach will likely prompt tighter controls and an escalation in cyber‑countermeasures.