Whitewashing Bloodshed with Fake News: How the Islamic Republic Turns Unrest Abroad into Cover for Repression

Iranian media outlets claimed in October 2026 that police had killed students during protests in France and that the French authorities had shut down the internet. Neither claim was supported by the evidence reviewed by fact-checkers. Both became arguments for defending the Islamic Republic’s conduct toward its own citizens.

In an interview with Iran’s Student News Network, a former state broadcasting official suggested that France would have killed far more people under circumstances comparable to Iran’s protests. Days later, the Islamic Republic’s top cyberspace official used the supposed French internet shutdown to praise the country’s domestic network. The message was straightforward: other governments repress protesters too, and the Islamic Republic handles the consequences better.

These claims appeared alongside other forms of pressure abroad. An Iran-aligned hacking group invoked a dispute over headscarves to justify attacks on Azerbaijani government websites. The UAE’s cybersecurity chief separately accused the Islamic Revolutionary Guard Corps, or IRGC, of involvement in attacks against his country. The cases differ, but they offer useful points of comparison: exploiting political grievances, imposing costs through digital attacks, and turning the results into a show of strength.

Claims of Student Deaths in a Contradictory Interview

On October 10, Student News Network, known as SNN, published an interview with Bashir Biazar, a former director in the music department of the Islamic Republic’s state broadcaster. He alleged that some French students had died following encounters with police, while others had fallen into comas.

The same interview included a section asking why the protests had produced no deaths. Yet this contradiction did little to interrupt the argument. Biazar claimed that events like those in Iran would have caused deaths on a vastly greater scale in France. An imagined French massacre became the standard against which the Islamic Republic’s security forces were to be judged.

There was real police violence to investigate in France. Reports reviewed by the Persian-language fact-checking outlet Factnameh described severe injuries, including the loss of sight in one eye and the loss of a hand. But its October 14 investigation found no credible reports, as of its review, that students had died or fallen into comas during the protests.

Adding deaths to that record changes the story. It gives audiences a false basis for equating events in France with the mass killings in Iran.

An Internet Shutdown Claim Becomes a Defense of Iran’s Domestic Network

On October 13, Nour News published remarks by Mohammad Amin Aghamiri, head of the Islamic Republic’s National Cyberspace Center. He claimed that an internet shutdown during the French protests had taken banking, education, and business services offline.

Aghamiri contrasted this supposed failure with Iran’s National Information Network, the domestic infrastructure that allows services inside Iran to remain accessible when international connections are restricted. His argument presented the continued availability of those services as evidence of better planning.

But the French shutdown on which that comparison depended had not been established. Factnameh had already examined the claim on October 6, identifying its circulation through Iranian outlets including Asr Iran and Jahan News. It reported that network monitoring data showed no corresponding nationwide outage.

The comparison sidesteps the central question about the Islamic Republic’s shutdowns. People were prevented from communicating, reporting events, and sharing evidence of state violence. Aghamiri’s account redirects attention toward whether payment systems and other domestic services kept working. Cutting people off from the outside world becomes a technical challenge to manage—and an achievement to advertise.

Iran’s January Killings Behind the Comparison

The crackdown behind these arguments took place in January 2026, during the Iranian calendar month of Dey 1404. Amnesty International has documented the killing of thousands of people, particularly on January 8 and 9. Its evidence describes security forces firing at protesters’ heads and torsos and identifies the involvement of the IRGC, its Basij militia, police units, and plainclothes personnel. The organization also describes the internet shutdown as a means of concealing abuses and stopping evidence from reaching the outside world.

The final death toll remains disputed. Amnesty cites the Islamic Republic’s figure of 3,117 deaths alongside UN Special Rapporteur Mai Sato’s account of information from medical sources suggesting the toll could reach 20,000. The higher estimate is not a final, independently verified count. The documented killing of thousands is nevertheless sufficient to demand answers about who ordered and carried out the crackdown.

Inventing a comparable death toll abroad helps evade those questions. Once audiences accept that every government kills protesters and shuts down the internet, accountability can give way to resignation. The argument asks people to stop judging what happened in Iran because something similar supposedly happens everywhere.

Cyber Intimidation Targets Countries’ Vulnerable Points

In Azerbaijan, a dispute over access to education became a pretext for disrupting government services. The Iran-aligned group “313,” which also calls itself the “Islamic Cyber Resistance in Iraq,” claimed responsibility for attacks on government websites on October 13. It said it was acting in response to restrictions affecting girls who wore headscarves to school. Azerbaijani authorities confirmed that more than 100 government domains had been targeted. The group’s larger claims about the scale and success of its operation were not independently verified.

The reported method was a distributed denial-of-service attack: flooding services with traffic to make them unavailable. The available reporting did not establish that the attackers had entered government systems or stolen information.

The group used a domestic grievance to justify imposing costs on another country. Its declared support for schoolgirls came with threats against digital services that citizens themselves may need. Claims of widespread disruption then gave the group material to promote its own power.

The UAE case involved allegations of more destructive activity. Cybersecurity chief Mohammed Al Kuwaiti described ransomware, supply-chain attacks, and data-wiping malware. He reported two successful breaches of private companies in which information was deleted and attributed many attacks against the UAE to the IRGC.

The public account did not provide enough technical evidence to independently assess that attribution. It also did not connect the attacks to domestic unrest in the UAE.

These distinctions matter. A false report, an attack that temporarily disables a website, and a breach that destroys company data cause different kinds of harm. They can nevertheless serve a similar purpose: making another country pay a price while giving the actors involved something to present as a victory.

Calling this cyberbullying captures the coercion involved. The weakness being exploited may be a political dispute, a vulnerable online service, or an audience’s willingness to believe a dramatic claim. A country does not have to be technologically weak for one of those openings to exist.

How Whitewashing Bloodshed Works

The French case shows how whitewashing bloodshed can work without an elaborate technical operation. Unsupported claims are attached to real events, published by established outlets, and repeated in arguments defending the Islamic Republic.

The political connection is visible in the material itself. Biazar brings the discussion back to Iran’s protests. Aghamiri uses the alleged French shutdown to defend Iran’s domestic infrastructure. Their arguments draw attention away from the people killed and the officials responsible.

This is a way of filling the gap where an answer should be. Faced with questions about lethal repression, the response is to describe—or invent—worse conduct elsewhere. The evidence supports that reading of these statements. It does not establish that every participating outlet, social media account, and hacking group follows orders from a single command.

Cyberattacks offer another opportunity to manufacture an appearance of strength. A website going offline, a threat to disrupt more services, or an inflated claim of success can all be presented as proof of reach. The propaganda value may exceed the damage that can actually be verified.

The three cases therefore belong in the same discussion, with their differences intact. False claims about France help excuse the Islamic Republic’s repression. An Iran-aligned group turns Azerbaijan’s headscarf dispute into a justification for attacks. In the UAE, an official alleges IRGC involvement in breaches and data destruction.

Together, they show how pressure abroad can supply material for political messaging at home. None answers the questions left by January’s killings: who gave the orders, who opened fire, and who cut the communications that could have exposed them.