Skip to content
safemode.space
All incidents
2003-07-05
RF jamming
link

Uplink jamming of Telstar 12 carrying US and diaspora Persian-language broadcasts into Iran (July 2003)

Confidence in this reading:
high

What happened

At 5:35 p.m. EDT on 5 July 2003, shortly after the Voice of America began its Farsi-language television broadcasts and just after midnight in Tehran, interference began on the Telstar 12 transponder carrying them. Three VOA Farsi programmes (News & Views, Next Chapter and Roundtable with You) and several Los Angeles-based diaspora Persian channels were affected; the channels named in reporting are ParsTV, Azadi Television, Appadana TV, National Iranian TV and Channel 1. The affected services were uplinked in the United States via Telstar 5, turned around at the Washington International Teleport in Alexandria, Virginia, joined there by the VOA feed and uplinked again to Telstar 12 over the eastern Atlantic; it was the Telstar 12 uplink that was jammed, cutting the broadcasts off not only in Iran but in Europe and the rest of the Middle East. Loral Skynet, the operator of Telstar 12, ran tests, concluded the interference was caused by a third party and asked the transmitter-location firm TLS Inc. of Chantilly, Virginia, to investigate; TLS identified the probable source as Havana, and one account fixes it at 20 miles outside the city, where Cuba's main electronic eavesdropping base at Bejucal sits. A senior US official said the jamming was almost certainly part of an effort by the Iranian government to eliminate dissent during a week of renewed student protests and the inauguration of VOA's Farsi television. The Broadcasting Board of Governors' chairman, Kenneth Tomlinson, condemned the Cuban government; the State Department spokesman, Richard Boucher, said only that the source was being looked into and would be raised with the Cubans. The jamming had become sporadic by the evening of Wednesday 9 July, the anniversary of the 1999 student demonstrations. A later account by Small Media states that the Cuban government subsequently said the jamming was being carried out by Iranians from the property of the Iranian embassy in Havana, that Cuban dissidents also claimed responsibility, and that the full account never emerged; it gives the reason for the Cuban location as Telstar 12 being very difficult to reach from Iranian territory at the time.

The event, its mechanism and its geolocation are well established; the actor is not, and the record separates the two. Loral Skynet concluded a third party was responsible and commissioned an independent transmitter-location firm, which identified Havana. What is disputed is who was transmitting: a senior US official pointed to the Iranian government, the BBG chairman condemned Cuba, and Small Media's later account has the Cuban government naming Iranians operating from the Iranian embassy's property while Cuban dissidents claimed responsibility. One detail in the reporting is worth an editor's attention because it distinguishes the two jamming geometries within a single incident: Iran had previously jammed these broadcasts locally from high-power transmitters on towers in Tehran, and the fact that viewers outside Iran also lost the signal was the first hint that this time the jamming was happening on the western side of the Atlantic, against the uplink.

Attack vector

A ground transmitter inside Telstar 12's uplink footprint aimed a strong signal at the uplink transponder carrying the targeted channels and overwhelmed their carriers, denying the transponder across the spacecraft's whole coverage rather than in any one country.

Operational impact

Loss of three Voice of America Farsi-language television programmes and several diaspora Persian-language channels to their audiences in Iran, Europe and the rest of the Middle East, beginning within hours of the launch of VOA's Farsi television service and during a week of student protests in Iran; co-tenant broadcasters on the same capacity were jammed with them, including a Chinese client of one of the affected service companies.

Affected segments

link, space, user

Disclosed

2003-07-11

SPARTA techniques evidenced

Each row is a technique this record evidences, with the reasoning and the source that attests to it.

What relationship, confidence, and evidence mean on the rows below
Relationship

What kind of link this is between the technique and the target.

Mitigates: the target actively prevents, detects, or recovers from the technique.

Addresses: the target governs the technique or is relevant to it, without interdicting it. Most governance and policy obligations sit here.

Triggers obligation: the technique occurring is what triggers the duty the target imposes.

Relates to: related to the technique, but the target neither interdicts nor governs it. Used sparingly.

Confidence

How strongly the source supports this mapping, not how severe the technique is.

High: the source supports the mapping squarely.

Moderate: supported, with a qualification such as a cross-tactic reading that stays operationally sound.

Low: the source reaches the technique only in part.

Evidence

How close to the source text the mapping was made.

Direct: a verbatim excerpt of the cited source was read against the technique, and the rationale argues from that excerpt.

Derived: the mapping follows from the source's scope or structure, with no on-point excerpt addressing the technique.

Inferred: reached by composition through another framework, or by domain reasoning the source does not support on its face.

  • The co-tenancy effect is reported by an investigator working with the broadcasters: not only were the Iranian signals jammed but those of other nearby broadcasters as well, including a Chinese client. Non-useful energy injected at the RF layer, crowding out carriers that were not the target, is EX-0013.02's case. Derived because the source reports the outcome rather than the receiver-level behaviour the technique details. SPARTA's bibliography also cites this incident at EX-0013.02.

    https://www.nbcnews.com/id/wbna3340692

  • EX-0016Jamming
    high
    direct
    #

    The satellite's operator ran tests, concluded the interference was caused by a third party and commissioned a transmitter-location firm; the BBC's Media Monitoring Service described the effect as a mysterious, interfering signal rendering the broadcasts unwatchable. Intentional radio-frequency interference in the band of the target carrier, reversible and eventually sporadic, is EX-0016. SPARTA's bibliography cites this incident at EX-0016.

    https://www.nbcnews.com/id/wbna3340692

  • Named twice by the reporting. Investigators state that it is the Telstar 12 uplink that is being jammed, and the mechanism is given as aiming a strong signal at the uplink transponder on the satellite and overwhelming the broadcasters' signals. The geometry follows: the emitter had to lie within the satellite's uplink footprint, which investigators put at the Eastern United States, the Caribbean and South America. SPARTA's own bibliography cites this incident at EX-0016.01 through this article, and it is the only incident-specific citation the whole bibliography places at EX-0016.01 (its other two references there are a general counterspace primer and an academic paper). The scope caveat carried across this batch still applies: the technique's effect clause names telecommand and ranging traffic, and what was denied here was a payload transponder.

    https://www.nbcnews.com/id/wbna3340692

  • An unauthorised transmitting facility inside the spacecraft's uplink footprint, radiating mission-compatible energy at a named transponder, located by an independent transmitter-location firm. That is IA-0008.01's setup, and SPARTA's bibliography cites this incident there through this article. The tactic caveat carried across this batch stands: IA-0008.01 sits in Initial Access and its purpose clause concerns traffic the spacecraft will parse, whereas this actor sought denial.

    https://www.nbcnews.com/id/wbna3340692

  • IMP-0002Disruption
    moderate
    direct
    #

    Distinct from the denial and separately dated: the interference began on 5 July, worsened over two days, and had become sporadic by the evening of 9 July. Intermittent impairment across a period, as opposed to the complete loss at its peak, is IMP-0002. Both are mapped because the source describes both phases; moderate confidence because the sporadic phase is reported in one clause.

    https://www.nbcnews.com/id/wbna3340692

  • IMP-0003Denial
    high
    direct
    #

    The broadcasts were cut off, and not only in Iran: investigators record the loss extending to Europe and the rest of the Middle East, and the BBC's monitoring service recorded the broadcasts as unwatchable. Temporary elimination of access to a service without physical damage. SPARTA's bibliography cites this incident at IMP-0003 through this article.

    https://www.nbcnews.com/id/wbna3340692

  • The same investigator sizes the ground stack: a dish and some power, not too much, possibly smaller than the standard 6-metre dish, a small dish with a lot of power. That is the assembly of a transmit-capable RF ground stack, which is RD-0001.01's subject, described with enough specificity to be more than an inference. Moderate confidence because it is a capability estimate, not an inventory of what the actor actually used.

    https://www.nbcnews.com/id/wbna3340692

  • An investigator describes the preparatory step in the jammer's own procedure: put up a test pattern, do a sweep and find the transponder on the satellite you want to jam. Scanning spectrum to characterise and locate a specific mission channel before acting on it is REC-0003.03's subject. Direct on the described behaviour; moderate because the description is an expert's account of how it is done rather than an observation of this actor doing it.

    https://www.nbcnews.com/id/wbna3340692

Considered and not mapped

These techniques were considered for this record because a source, a related record or SPARTA's own catalogue pointed at them. Each was read against what the sources say and not mapped. The reason is given in full.

  • SPARTA's bibliography cites this incident here, through the Insight Magazine article. The reporting rules it out for the July 2003 episode and explains why: Iran had jammed these broadcasts locally in the past using high-power transmitters on towers in Tehran, and the tell that this episode was different was that viewers outside Iran lost the signal too. That is the uplink case, not the downlink case. Note that the earlier in-country jamming the article refers to WOULD be EX-0016.02; it is a different, undated episode and is not recorded here.

  • SPARTA's bibliography cites this incident here, through the Insight Magazine article this session could not read. IA-0004.01 is initial access through the mission's backup or standby ground segment. Nothing in the retrievable record involves a backup ground path, an operator account or a failover; the uplink chain described is the primary one. Flagged for re-check by an editor who can OCR the Insight article.

  • Cited by SPARTA at this incident. No source describes rented or compromised commercial ground-station capacity; the equipment estimate in the reporting is of an actor-owned dish.

  • Cited by SPARTA at this incident. REC-0003.03 carries the reconnaissance claim, and it carries it on a specific described behaviour (sweeping for the transponder). Mapping the broader parent as well would double-count one quoted procedure.

  • Cited by SPARTA at this incident. Nothing in the record describes reconnaissance of antenna geometry, transponder type, gain control or saturation points.

  • Cited by SPARTA at this incident. The timing against the VOA launch and the protest anniversary is striking and is noted by two sources, but it required only a published broadcast schedule and a calendar, not the mission-CONOPS reconnaissance REC-0009 describes.

Sources

The published accounts this record rests on. The tier is SafeMode Space's own assessment of the source, and the reason for it is given beside it. What the tiers mean and how they are assigned: the source tiers.

A source is listed when a mapped technique rests on it, or when it disputes the account. One the curators read but neither cited nor recorded as disputing the record is not listed, so an absence here means neither is true rather than that nobody looked.

  • NBC News · Robert Windrem · 2003-07-11

    Tier 2: Investigative reporting by a network news producer working from a satellite operator's own written findings, a named third-party geolocation firm, and investigators for the companies involved.

  • Insight Magazine · J. Michael Waller · 2003-08-01

    Tier 3: Opinion-magazine reporting; cited here because it is the source SPARTA's own bibliography carries for this incident, not because it is independently authoritative.

  • PBS NewsHour · 2003-07-17

    Tier 2: Contemporaneous reporting by a national public broadcaster, quoting the satellite operator's finding, the BBG chairman and the State Department spokesman by name.

  • Small Media · 2012-11-01

    Tier 2: Research report by a named organisation working from documented interviews with a telecommunications engineer, a former Iranian MP and broadcaster staff; it states its own method and its own limits.

Every source SafeMode Space reproduces, and on what terms: sources and attribution.

Corpus 2026.08.24-1, built 2026-08-24 from 226 techniques, 308 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.