CrimeOwl AI logoCrimeOwl AI
CasesBlogPricingAboutLaw Enforcement
  1. Home
  2. /
  3. Cases
  4. /
  5. MANSOUR AHMADI
Back to CasesMore Cases
Multiple organizations across critical infrastructure, government agencies, and non-profit sectors

The person at the center of this case

Multiple organizations across critical infrastructure, government agencies, and non-profit sectors

Case
#703
SourceFBI WantedUpdated Mar 15, 2026
United States District Court for the District of New Jersey; FBI
Cold Case · Open
4 years waiting · since 2022

MANSOUR AHMADI

Justice for Multiple organizations across critical infrastructure, government agencies, and non-profit sectors — the trail went cold in 2022, but the truth hasn't.

Start here

Key leads to think about

🎯
suspect
Lead #1

What is Mansour Ahmadi's current location and network within Iran?

🔍
evidence
Lead #2

What specific organizations and critical infrastructure systems were targeted and compromised?

💡
clue
Lead #3

How did Ahmadi coordinate with Ahmad Khatibi Aghda and Amir Hossein Nickaein Ravari across international borders?

Mansour Ahmadi is wanted for his alleged involvement in a coordinated international cybercrime campaign that compromised hundreds of computer networks between October 2020 and August 2022. The scheme involved unauthorized access to protected networks, data theft, encryption of systems, and extortion of victims across critical infrastructure, government agencies, and non-profits. Ahmadi, believed to reside in Iran and fluent in Farsi, remains at large with a federal indictment issued in August 2022.

Case
#703
SourceFBI WantedUpdated Mar 15, 2026
United States District Court for the District of New Jersey; FBI

Try asking

Claim this imported case

A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.

10 uploads25 AI questions/day

This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.

More leads to consider

Beyond the top three above — each detail below could be the thread that pulls this case open.

📞
contact
Lead #4

What communication channels and financial methods were used to receive ransom payments from victims?

Have information about any of these leads?

Even the smallest detail could be the key to solving this case.

Official wording

Source Narrative

Conspiracy to Commit Fraud and Related Activity in Connection with Computers; Intentional Damage to a Protected Computer; Transmitting a Demand in Relation to Damaging a Protected Computer Caution: Mansour Ahmadi, Ahmad Khatibi Aghda , and Amir Hossein Nickaein Ravari are wanted for their alleged involvement in a coordinated campaign which compromised hundreds of computer networks across the United States and abroad. Between October 2020 and August 2022, the three men allegedly gained unauthorized access to protected networks, exfiltrated data, encrypted computer systems, and extorted victims for ransom, causing damage to and disrupting operations of organizations across multiple sectors, including critical infrastructure, government agencies, and non-profit organizations.

On August 10, 2022, a federal grand jury sitting in the United States District Court for the District of New Jersey in Newark, New Jersey, indicted Mansour Ahmadi, Ahmad Khatibi Aghda, and Amir Hossein Nickaein Ravari on charges of conspiracy to commit fraud and related activity in connection with computers, intentional damage to a protected computer, and transmitting a demand in relation to damaging a protected computer. Remarks: Mansour Ahmadi is known to speak Farsi and reside in Iran.

Timeline of Events

🕵️
2020-10-01

Campaign begins

Coordinated cybercrime campaign allegedly begins with unauthorized access to protected networks

🕵️
2022-08-10

Federal indictment

Federal grand jury in the United States District Court for the District of New Jersey indicts Mansour Ahmadi, Ahmad Khatibi Aghda, and Amir Hossein Nickaein Ravari on charges of conspiracy to commit fraud, intentional damage to protected computers, and transmitting extortion demands

Key Locations
Interactive map showing important locations related to this case

Case Information

Incident:October 1, 2020
Last Updated:September 12, 2026

Up to $10 Reward

For information leading to the resolution of this case

Leave a comment

Comments

Case Information

Incident:October 1, 2020
Last Updated:September 12, 2026

Up to $10 Reward

For information leading to the resolution of this case