UPDATE: What is FANAP? Behnama- Iran- Leak

What is FANAP? Iran exposed – Leak upload in progress

– Established with the investment of Pasargad Financial Group

– Primary mission was to design and prepare a native Iranian banking solution

– Funded Arvan Cloud.

Behnama Explained – Iran Exposed

But they expended they activities way more further than that.


فناپ چی هست؟
-توسط سرمایه گذاری گروه مالی پاسارگاد بنا شد که
هدف اصلیش طراحی و اماده سازی سیستم بانکداری ایرانی بود
-ابر آروان رو تاسیس کرد
و فعالیت هایش خیلی گسترده تر و فراتر از هدفش شد

FANAP-INFRA software developers

BehNama – Video surveillance using facial recognition (implemented in all Pasargad Bank)

BehYab – Car GPS and tracking system

BehKhan – Car plate recognition system (hijab alert)

BehCard – Face recognition system for printing ID card


توسعه زیرساخت نرم افزاری فناپ:
بهنما: شناسایی چهره مورد استفاده در تمامی شعب بانک پاسارگاد
بهیاب : سیستم رهیاب خودرو
بهخوان: پلاک خوان خودرو (اس ام اس های حجاب در خودرو رو یادتونه؟)
بهکارت: تشخصی چهره جهت چاپ کارت شناسایی

The SSO platform used by the Regime to authenticate user online, are connected to FANAP system that make usage of an API, compiling each details of your life, to classify who has rights to access a service, or not, but also to build a floating card beside your head for facial recognition.


پلتفرم SSO توسط رژیم برای ورود کاربران به فناپ جهت استفاده از API ها استفاده میشه. سامانه ای جهت پردازش تک تک جزئیات زندگی شما. تا توسط یه کارت شناور کنار صورت شما در تصویر شناسایی شده، تعیین کنه شما حق استفاده از خدمات رو دارید یا خیر!!

The pod.ir API, access the same system as the SSO, and is also connected to Pasargad Bank. FANAP called it the Podium, and they owns it.

Pod is management platform for all kind of monitoring, people or, internet.

To understand, the following is to read.

Pasargad Financial Group

The Pasargad Financial Group is comprised of Pasargad Bank and several other companies, which operate in the areas of information technology, communications, electronic payment services, insurance, reinsurance, brokerages, heavy equipment leasing, commercial building leasing, construction, mining and industry, energy and other services.

One of their companies is FANAP.

FANAP also have multiple sub companies, and has developed everything in order to deploy the National Information Network (intranet).


Some companies owned by Pasargad Financial Group;

1. Bank Pasargad
2. Middle East Mining and Mining Industries Holding
3.  Pasargad Arian Information and Communications (FNAB)
4.  Pasargad Insurance
5.  Iranian Reinsurance Company
6.  Pasargad Heavy Machinery and Equipment Leasing Company
7.  Pasargad Leasing
8.  Parsargad Arzesh Afarinan Company
9.  Middle East Foundational Company
10. Pasargad Energy Development
11.  Pasargad Bank Electronic Payments
12.  Pasargad Currency Exchange and Services
13.  Pasargad Bank Brokerage Services
14.  Eighth Urban Development and Construction Company
15.  Pasargad Mass Production
16.  Pasargad Human Capital Research and Development Institution
17.  Arian Investments (AICO)
18. Arian Engineering and Construction Management
19.  Arian Pasargad Construction Management
20.  Pars Arian Investments
21.  Pasargad Bank Financial and Investment Services
22.  Pasargad Bank Investments
23.  Arian Construction (Modabberan)
24.  Iran Credit Ranking Consulting
25.  Arian Saman Construction
26.  Pasargad Arian Logistics Services
27.  Pasargad Financial Group Pension
28. Pasargad Commerce Development
29.  Pasargad Tadbirgaran Company
30.  Pasargad Future Commerce Management
31.  Pasargad Group International Commerce Development and Expansion
32.  Mana Iranian Renewal and Expansion Industries
33.  Zarand Iranian Steel Company
34.  Middle East Aftab Derakhshan (Shining Sun) Commerce
35.  Iranian Sirjan Steel Company
36.  Middle East Meyar Industrial Engineering Company
37.  Pars Hafez Investments.

Fannap-infra, is developing multiple software, and here is one of them.

Behnama is a video surveillance system that operates on a Linux platform. It is primarily written in C++, PHP, and C.

This system was initially deployed across all branches of Pasargad Bank, marking its first use. A standout feature of Behnama is its development for facial recognition capabilities, enhancing its surveillance effectiveness.

It is built on microservice architecture, it contains RTSP client, recording, web-app, webrtc, API, analyzer, Kafka, ONVIF, PostgressDB and influxDB services.

• Kafka from Apache, is a service likely used for real-time processing of video data from multiple sources.

• Redis and Postgres services are likely used to store metadata or analysis results. They store information about when and where each face was detected, or they might store the facial recognition results.

• ONVIF service and RTSP client are used to interact with IP cameras that support these protocols. They arr used to retrieve the video data that is processed by the Kafka and Analyzer services.

• The Jaeger, SeaweedFS, ELK stack, and Filebeat services are likely used for system monitoring and debugging. They are used to trace system activity, store system data, log system events, and ship logs to a centralized location for analysis.

They connect to vCenter, a centralized management application and framework that acts as a proxy for managing VMware vSphere environments.

They are also connected to a monitoring panel owned by Net Negar (netnegar.io) that seems adapted for the National internet project.

One of their API connects to pod.ir by MQTT protocol. Pod is a grand plan to create an infrastructural and comprehensive platform designed and developed by Fanap, in order to develop sub-platforms and online businesses. 

This platform is connected to Pasargad Bank and all the businesses developed in it are connected to the digital platforms of this bank.

The Pod API documentation include a whole section for facial recognition. https://accounts.pod.ir/apidocs/

Behnama is not just a tool; it is a powerful instrument of surveillance. It is being actively used by the Iranian government, law enforcement agencies, and military personnel, marking a significant development in the country’s surveillance capabilities.

The analysis is not based on speculation or unverified information, but on the software’s code itself that we was able to breached, providing undeniable proof of its capabilities and deployment.

This is not just about technology; it’s about privacy, civil liberties, and the balance of power.


بهنما فقط یه ابزار نیست! تجهیزات نظارتی قدرتمند هستش؛ که با ایجاد توانمندی نظارتی بالا، همین الان هم توسط حکومت و سازمان های امنیتی و نظامی در حال استفاده هست.
انالیز بر اساس سورس کد هایی که پس از نفوذ بدست امده انجام شده نه اطلاعات تایید نشده و تئوری ها، که باعث شده مدارک غیر قابل انکاری از توسعه و توانمندی هاش ارائه بده.

موضوع صرف تکنولوژی نیست، موضوع حریم شخصی، ازادی مردم و بالانس قدرته!

Now that the presentation has been made, as you might expect….

FANAP software, Behnama, was entirely breached.

A total of around 20 GB compressed have been analyzed during the last two months, file by file.

Now these data are going to be made accessible, in the interests of the Iranian people, but also in the interests of protecting the privacy of each and every one of us.


همونطوری که انتظار داشتین ، ارائه اماده شده…
نرم افزار بهنما متعلق به فناپ بهش نفوذ شد.
طی دو ماه حدود ۲۰ گیگ اطلاعات زیپ شده، فایل به فایل تجزیه و تحلیل شدند.
و الان هم فایل ها به نفع مردم ایران و البته محافظت از حریم شخصی تک تک ما، قراره قابل دسترسی بشن.

https://mega.nz/file/yFUUARBT#GyGjNcZmdj3hgWDd6ZfuWhQFPGxV7MoYSCUCXI7a6dA

https://mega.nz/folder/XQMFxLhA#CHXXmWrOGXH–cC5-rXIQw

For those who want to have a look while we are uploading all the data, here are some of the configurations files

PART_2

Middle East Mines Industries Development Holding Company

https://www.midhco.com/

Yes, FANAP also made their surveillance system using Behnama software, and we also got it 😃

contains these folder:

api
kafka
onvif
postgress
recorder
redis
rtsp-230607
seaweed
stream
web
zookeeper

FILE:

MIDHCO is a huge holding and a main source of income and corruption of Iran’s regime, linked to #IRGC terrorists companies.