CrimeOwl AI logoCrimeOwl AI
CasesBlogPricingAboutLaw Enforcement
  1. Home
  2. /
  3. Cases
  4. /
  5. AHMAD FATHI
Back to CasesMore Cases
United States financial sector and companies

The person at the center of this case

United States financial sector and companies

Case
#628
SourceFBI WantedUpdated Mar 15, 2026
Federal Bureau of Investigation (FBI); U.S. District Court, Southern District of New York
Cold Case ยท Open
10 years waiting ยท since 2016

AHMAD FATHI

Justice for United States financial sector and companies โ€” the trail went cold in 2016, but the truth hasn't.

Start here

Key leads to think about

๐ŸŽฏ
suspect
Lead #1

What was Ahmad Fathi's specific role in directing the DDoS attacks and how did he communicate with employees?

๐Ÿ”
evidence
Lead #2

What attack scripts and compromised computer systems were provided by ITSecTeam and how were they weaponized as bots?

๐Ÿ“
location
Lead #3

Where is Ahmad Fathi currently located and why has he not been apprehended despite the 2016 warrant?

Ahmad Fathi, director of Iranian IT company ITSecTeam, is wanted for allegedly orchestrating a conspiracy to conduct coordinated distributed denial of service (DDoS) attacks against U.S. financial institutions and companies between 2011 and 2013. He allegedly provided his employees with attack scripts and compromised computer systems used as bots in the attacks. A federal warrant was issued following his January 21, 2016 indictment in the Southern District of New York for conspiracy to commit computer intrusion.

Case
#628
SourceFBI WantedUpdated Mar 15, 2026
Federal Bureau of Investigation (FBI); U.S. District Court, Southern District of New York

Try asking

Claim this imported case

A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.

10 uploads25 AI questions/day

This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.

More leads to consider

Beyond the top three above โ€” each detail below could be the thread that pulls this case open.

๐Ÿ‘ค
person
Lead #4

Which employees of ITSecTeam were involved in executing the attacks and have they been identified or prosecuted?

๐Ÿ’ก
clue
Lead #5

How many U.S. financial institutions and companies were targeted and what was the financial impact of these attacks?

Have information about any of these leads?

Even the smallest detail could be the key to solving this case.

Official wording

Source Narrative

Conspiracy to Commit, and Aid and Abet, Computer Intrusion Caution: Ahmad Fathi is wanted for his alleged involvement in a conspiracy to conduct a coordinated campaign of distributed denial of service ("DDoS") attacks against the United States financial sector and other United States companies from 2011 through 2013. Fathi is the director and owner of ITSecTeam, also known as Amnpardazesh Kharazmi, an Iranian Information Technology company.

He allegedly provided his employees with attack scripts and shells for compromised computer systems which were later used as bots in the denial of service attacks. On January 21, 2016, a grand jury in the United States District Court, Southern District of New York, indicted Fathi for his involvement in the scheme and a federal warrant was issued for his arrest after he was charged with conspiracy to commit, and aid and abet, computer intrusion.

Remarks: Fathi is known to speak both English and Farsi.

Timeline of Events

๐Ÿ“‹
2011-01-01

DDoS Campaign Begins

Coordinated campaign of distributed denial of service attacks against U.S. financial sector and companies begins

๐Ÿ“‹
2013-12-31

DDoS Campaign Ends

Coordinated DDoS attack campaign concludes

๐Ÿ•ต๏ธ
2016-01-21

Federal Indictment

Grand jury in U.S. District Court, Southern District of New York, indicts Ahmad Fathi for conspiracy to commit and aid and abet computer intrusion; federal warrant issued for arrest

Key Locations
Interactive map showing important locations related to this case

Case Information

Incident:January 1, 2011
Last Updated:September 4, 2026

Leave a comment

Comments

Case Information

Incident:January 1, 2011
Last Updated:September 4, 2026