In an exclusive report, for the first time, the connection between the covert Parsian Afzar Rayan Borna company and the cyber group Banished Kitten has been revealed. Operating under the CT division in MOIS (Ministry of Intelligence), this company aims to mislead public perception and avoid exposing its covert objectives while operating in secrecy and concealing its true intentions.
This newly uncovered link highlights Parsian Afzar Rayan Borna’s pivotal role in the complex and multi-layered network of cyber operations orchestrated by the Iranian government, focusing heavily on cyberattacks and digital influence campaigns. Among its most notable operations is the cyberattack on Albania’s infrastructure, which led to a diplomatic fallout and severance of relations between Albania and the Islamic Republic.
The company’s headquarters is located at Malmoon Commercial-Administrative Complex, Amir Kabir Boulevard, West Tehran, serving as the primary base for its cyber and intelligence operations.
The identities of 9 of the company's personnel have been disclosed:
- Alireza Talebi Qareh Gūz-e Īl - National ID: 2741524912
- Morteza Talebi Qareh Gūz-e Īl - National ID: 2754475036
- Mohammadreza Sheikh Bahai - National ID: 1271073730
- Hossein Ghassemi - National ID: 4890214992
- Seyed Mehdi Ebrahimi - National ID: 921073100
- Hamed Cheraghi-Shoi - National ID: 2003210271
- Mohammad Rahimzadeh Avansar - National ID: 2741447462
- Seyed Morteza Jamei - National ID: 1583166912
- Ali Ansari Pouya - National ID: 2741492646
In addition to conducting cyberattacks, this company engages in creating fake accounts on social media platforms, such as X (formerly Twitter) and Instagram, to manipulate public opinion and suppress dissent both domestically and internationally. Their primary objective is to steer public sentiment in favor of the regime while masking their real activities from scrutiny.
The disclosure of Parsian Afzar Rayan Borna’s connection to Banished Kitten reveals a far deeper and more significant role in the Iranian regime’s cyber operations than previously known.