The person at the center of this case
U.S. aerospace and satellite companies; American citizens (identity theft victims)
Cold Case · Open
5 years waiting · since 2020
IRGC CYBER ACTORS
Justice for U.S. aerospace and satellite companies; American citizens (identity theft victims) — the trail went cold in 2020, but the truth hasn't.
Start here
Key leads to think about
🎯
suspect
Lead #1Where are Said Pourkarim Arabi, Mohammad Reza Espargham, and Mohammad Bayati currently located, and what protective measures has Iran taken to shield them from extradition?
🔍
evidence
Lead #2What specific aerospace and satellite technology was stolen, and how has it been utilized by Iranian military or intelligence agencies?
👁️
witness
Lead #3Which U.S. companies and employees were targeted, and can they identify patterns in the social engineering tactics used?
Three Iranian nationals—Said Pourkarim Arabi, Mohammad Reza Espargham, and Mohammad Bayati—are wanted for allegedly conducting computer intrusions targeting U.S. aerospace and satellite companies on behalf of Iran's Islamic Revolutionary Guard Corps (IRGC). The conspiracy involved social engineering attacks to steal American citizens' identities, which were then used to access and exfiltrate sensitive commercial information, intellectual property, and personal data. The men remain at large, and their capture would significantly disrupt a sophisticated state-sponsored cyber operation against critical U.S. technology sectors.
Case
#972
U.S. District Court for the Eastern District of Virginia; Federal Bureau of Investigation (FBI)
Try asking
Claim this imported case
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
10 uploads25 AI questions/day
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
More leads to consider
Beyond the top three above — each detail below could be the thread that pulls this case open.
💡
clue
Lead #4What digital forensics evidence links these individuals to the IRGC, and are there other co-conspirators yet to be identified?
Have information about any of these leads?
Even the smallest detail could be the key to solving this case.
Official wording
Source Narrative
Conspiracy to Commit Computer Intrusions; Obtaining Information by Unauthorized Access to Protected Computers; Intentional Damage to Protected Computers; Aggravated Identity Theft; Conspiracy to Commit Wire Fraud Caution: Said Pourkarim Arabi , Mohammad Reza Espargham , and Mohammad Bayati are wanted for their alleged involvement in criminal activities including computer intrusions, identity theft, and wire fraud. These Iranian hackers allegedly conspired to commit computer intrusions targeting American companies in the aerospace and satellite industries.
They allegedly engaged in a coordinated campaign of social engineering that resulted in the theft of United States citizens’ identities, which they then used to steal critical information related to American aerospace and satellite technology and resources, including sensitive commercial information, intellectual property, and personal data. The men allegedly conducted this activity at the direction of Iran’s Islamic Revolutionary Guard Corps (IRGC).
On September 15, 2020, a federal grand jury in the United States District Court for the Eastern District of Virginia, in Alexandria, Virginia, indicted the men on charges of Conspiracy to Commit Computer Intrusions, Obtaining Information by Unauthorized Access to Protected Computers, Intentional Damage to Protected Computers, Aggravated Identity Theft, and Conspiracy to Commit Wire Fraud, and federal arrest warrants were issued.
Timeline of Events
🕵️
2020-09-15
Federal Grand Jury Indictment
A federal grand jury in the U.S. District Court for the Eastern District of Virginia indicted Said Pourkarim Arabi, Mohammad Reza Espargham, and Mohammad Bayati on charges of Conspiracy to Commit Computer Intrusions, Obtaining Information by Unauthorized Access to Protected Computers, Intentional Damage to Protected Computers, Aggravated Identity Theft, and Conspiracy to Commit Wire Fraud. Federal arrest warrants were issued.
Key Locations
Interactive map showing important locations related to this case
Case Information
Incident:September 15, 2020
Last Updated:April 29, 2026
Leave a comment
Comments
Case Information
Incident:September 15, 2020
Last Updated:April 29, 2026