Photo via New York Post

Iran penetrates California as freeway sign terrifies drivers with photos and menacing threats

Read the original at New York Post ↗
Cite

Hedlund, P. (2026, September 20). Iran penetrates California as freeway sign terrifies drivers with photos and menacing threats. New York Post. https://nypost.com/2026/09/20/us-news/los-angeles-405-freeway-sign-hacked-with-threats-targeting-iranian-dissidents/

Dated when The Aporia collected the article, usually within hours of publication. Check the original for its exact date and byline.

New York Post · collected 2026-09-20 · by Patrick Hedlund

Quick Summary

A digital traffic sign on the 405 Freeway in Los Angeles was hacked to display the URL of goorkan.info, a site linked to Iran's Islamic Revolutionary Guard Corps and aimed at identifying and punishing perceived enemies of Iran. The hack occurred near Persian Square on September 8 and was noticed by an Iranian-born real estate broker who reported it. Goorkan means "gravedigger" in Farsi and the website includes personal information and photos of individuals targeted for their opposition to the regime. The California Department of Transportation confirmed the unauthorized message and is investigating how the breach occurred; this comes amid warnings from the FBI about increased cyber threats targeting Iranian dissidents globally.
Written by AI on 2026-09-21, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

On September 15, digital traffic signs on Los Angeles' 405 Freeway near Persian Square in Westwood were hacked to display the website goorkan.info, which threatens enemies of Iran's Islamic regime. The California Department of Transportation confirmed that an unauthorized message was posted and has initiated a review into how the hack occurred. Goorkan.info identifies itself as a collective effort by patriotic individuals to punish those who oppose Iran, suggesting it may be linked to Iran’s Islamic Revolutionary Guard Corps, designated by the US government as a foreign terrorist organization in 2019. The incident has alarmed Iranian dissidents in California and raised concerns about cyber threats targeting opponents of the regime.

Written for “Iran Cyber Threats California Freeways” on 2026-11-02, grounded in this article and the 0 other(s) covering the same event.

Story

📰 Iran Cyber Threats California Freeways
Technology · 1 article(s) covering the same event.

Compared with similar articles

Nothing to compare against. No article is close enough to this one for the pipeline to have linked or judged the pair.
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
52
sentences that state something as happening or true
Uncertain
4%
2 of 52 hedged ("reportedly", "may", "according to")
Leaning
Leans strongly right
of the writing, not the subject · beta estimate
Publisher signals
66/100
New York Post's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
1
Technology
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-09-21 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

New York Post · 15998 article(s) · 35 correction(s) detected
Running correction rate · 35 correction(s)

Who wrote this

Patrick Hedlund
4 article(s) here · 1 carrying a prediction
🔮 Los Angeles’ top federal prosecutor fears noncitizens could be illegally casting ballots in California as dozens of polling places opened across LA County Saturday, warning the state could be trying to run out the clock before disputed votes are counted.
🔮 “I couldn’t believe what I was seeing on the sign.
Also by Patrick Hedlund
Nothing else under this byline is closely related to this article, so these are simply their most recent.

Topics

FBI Iran Iranian Los Angeles Westwood

Subjects

Iranian NORP · 8× Iran GPE · 6× Los Angeles GPE · 4× America GPE · 3× The Post ORG · 3× FBI ORG · 2× Karsaz GPE · 2× Westwood GPE · 2× Islamic NORP · 1× Los Angeles’ GPE · 1×

Narrative

The website abruptly changed this week, adding a section called “The Burn List” containing an ominous message suggesting its operators had amassed sensitive information about their targets. “There is no need to draw a map anymore; the network has been opened from within,” its description reads.
framing: assertive · carried by 1 article(s) · first seen 2026-09-21
🔮 “I couldn’t believe what I was seeing on the sign.

Claims (52 extracted, 2 hedged)

A digital traffic display on one of Los Angeles’ busiest freeways was hacked to promote a menacing website targeting enemies of Iran’s Islamic regime – a chilling breach that has put Iranian dissidents in the city on edge. asserted
that → hack → edge
Passersby spotted the sign on the 405 Freeway near Persian Square in Westwood blaring the web address goorkan.info, a site advertising a “national campaign to identify and punish traitors to the homeland.” asserted
Passersby → spot → homeland
The site described itself as “a collective and patriotic effort to identify, introduce, and punish traitors to the country and supporters of hostile actions against the soil and people of Iran.” asserted
site → describe → Iran
The traffic sign is operated by the California Department of Transportation, which acknowledged the disturbing takeover and unauthorized message. asserted
which → operate → takeover
“The Caltrans project team was alerted to the unauthorized message Sept. 15, and alerted the contractor to restore normal operations,” the agency said. asserted
agency → alert → operations
The website has been linked to Iran’s powerful Islamic Revolutionary Guard Corps, an elite military force designated by the US government as a foreign terrorist organization in 2019. asserted
website → link → 2019
“Goorkan” means “gravedigger” in Farsi. asserted
Goorkan → mean → Farsi
The disturbing breach comes as the FBI warned on Sept. 15 that Iranian state cyber actors were targeting dissidents, activists and journalists around the world. asserted
actors → come → world
The alarm comes months after the Trump administration began cracking down on Iranian nationals with ties to the regime, including relatives of senior Iranian figures who had been living in the US. asserted
who → come → US
Among those targeted was Eissa Hashemi, the son of former Iranian vice president Masoumeh Ebtekar — notoriously nicknamed ‘Screaming Mary’ by American hostages during the 1979 Iran hostage crisis — who had been living in the Los Angeles area before his green card was revoked. asserted
card → target → area
Los Angeles is home to the largest Iranian community outside Iran, with an estimated 141,000 Iranian Americans living in LA County. asserted
Angeles → estimate → County
Many settled in and around Westwood following the 1979 Islamic Revolution, transforming the neighborhood into a hub of Persian restaurants, markets and businesses that’s become known as ‘Tehrangeles.’ asserted
that → settle → Tehrangeles
The hacked sign was spotted by Iranian-born real estate broker Payam Shiravi, 59, at the Santa Monica Boulevard exit on Sept. 8 as he drove north on the 405 Freeway. asserted
he → hack → Freeway
Shiravi visited the chilling website and was horrified to discover people he knew among those targeted. asserted
he → visit → those
“I couldn’t believe what I was seeing on the sign. asserted
I → believe → sign
I drove by a couple of times to make sure it was real,” he told The Post. asserted
he → drive → Post
“It’s disturbing. asserted
It → ’ → ?
People that I know, who I protest with, are on the website. asserted
I → know → website
It’s putting a target on these innocent people.” asserted
It → put → people
Emel Karsaz, 48, an Iranian-born critic of the regime, told The Post she was “shocked” to find her name, photo and personal details on the site. asserted
she → bear → site
She said she filed a report with the FBI’s Los Angeles field office on Sept. 9. asserted
she → say → Sept.
“I panicked. asserted
I → panic → ?
When I went on the website my heart started beating so fast,” she told The Post. asserted
she → go → Post
“This is America where you have free speech and lots of security. asserted
you → have → security
Why do I have to see this in LA?” asserted
I → have → LA
Karsaz said the threats have left her afraid even thousands of miles from Iran. asserted
threats → say → Iran
“I feel terrible,” she said. asserted
she → feel → ?
“I live in America far away from IRGC but now I don’t feel safe anymore.” asserted
I → live → IRGC
She claimed the organization is “actively working in America – and that’s scary.” asserted
that → claim → America
Karsaz said she has already received chilling threats on social media, including one targeting her appearance. asserted
she → say → appearance
They told her: “Oh, you have green eyes – just enjoy it because you might not have them the next day – you may not have any face left. uncertain
you → tell → face
Watch out – you may not have the pretty face tomorrow.” The threats have left her terrified of being attacked with acid while walking around Los Angeles. “I’m very cautious on the streets of LA. uncertain
I → watch → LA
I walk with fear. asserted
I → walk → fear
I don’t want them to throw acid in my face.” asserted
them → want → face
“They are asking people to identify us so they can harm us back there and take away anything we have there,” she said. asserted
she → ask → anything
The FBI would not confirm whether it was investigating the freeway sign hack. asserted
it → confirm → hack
The website abruptly changed this week, adding a section called “The Burn List” containing an ominous message suggesting its operators had amassed sensitive information about their targets. “There is no need to draw a map anymore; the network has been opened from within,” its description reads. asserted
description → change → within
“From your everyday chats to your visa and residency status, everything is locked on our servers. asserted
everything → lock → servers
Every contract, every wire transfer and every midnight call is now a document in a file that can no longer be denied.” asserted
that → deny → file
Shiravi alleged the IRGC already has operatives inside the US, claiming its agents can be spotted at demonstrations attended by opponents of the Iranian regime. asserted
agents → allege → regime
…and 12 more, not listed.
💬Give feedback
🕘History 🎫Support