IRANIAN CYBER ACTORS

Caution

Mansour Ahmadi (https://www.fbi.gov/wanted/cyber/mansour-ahmadi), Ahmad Khatibi Aghda (https://www.fbi.gov/wanted/cyber/ahmad-khatibi-aghda), and Amir Hossein Nickaein Ravari (https://www.fbi.gov/wanted/cyber/amir-hossein-nickaein-ravari) are wanted for their alleged involvement in a coordinated campaign which compromised hundreds of computer networks across the United States and abroad. Between October 2020 and August 2022, the three men allegedly gained unauthorized access to protected networks, exfiltrated data, encrypted computer systems, and extorted victims for ransom, causing damage to and disrupting operations of organizations across multiple sectors, including critical infrastructure, government agencies, and non-profit organizations.

On August 10, 2022, a federal grand jury sitting in the United States District Court for the District of New Jersey in Newark, New Jersey, indicted Mansour Ahmadi, Ahmad Khatibi Aghda, and Amir Hossein Nickaein Ravari on charges of conspiracy to commit fraud and related activity in connection with computers, intentional damage to a protected computer, and transmitting a demand in relation to damaging a protected computer.