The person at the center of this case
United States financial sector and companies
Cold Case · Open
10 years waiting · since 2016
MOHAMMAD SADEGH AHMADZADEGAN
Justice for United States financial sector and companies — the trail went cold in 2016, but the truth hasn't.
Start here
Key leads to think about
🎯
suspect
Lead #1What is Ahmadzadegan's current location and operational status in Iran?
🔍
evidence
Lead #2What specific financial institutions and companies were targeted, and what was the financial impact of the attacks?
👤
person
Lead #3Who were the other members of Ashiyane Digital Security Team and Sun Army involved in the conspiracy?
Mohammad Sadegh Ahmadzadegan is wanted for his alleged role in coordinating distributed denial of service (DDoS) attacks against U.S. financial institutions and companies between 2012 and 2013. As co-founder of Mersad, a private security firm working for the Iranian Government, he allegedly managed botnets used in the attacks and trained Iranian intelligence personnel. He was indicted in January 2016 and is believed to be in Iran, making his apprehension and extradition critical to resolving this significant cybercrime conspiracy.
Case
#622
Iran
United States District Court, Southern District of New York; Federal Bureau of Investigation
Try asking
Claim this imported case
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
10 uploads25 AI questions/day
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
More leads to consider
Beyond the top three above — each detail below could be the thread that pulls this case open.
📞
contact
Lead #4What intelligence personnel received training from Ahmadzadegan, and are they still active?
💡
clue
Lead #5How were the Mersad and Kamikaze botnets technically constructed and deployed?
Have information about any of these leads?
Even the smallest detail could be the key to solving this case.
Official wording
Source Narrative
Conspiracy to Commit, and Aid and Abet, Computer Intrusion Caution: Mohammad Sadegh Ahmadzadegan is wanted for his alleged involvement in a conspiracy to conduct a coordinated campaign of distributed denial of service ("DDoS") attacks against the United States financial sector and other United States companies from 2012 through 2013. Ahmadzadegan was the co-founder of Mersad, a private computer security company that performed work on behalf of the Iranian Government, and a former member of the Iran-based computer hacking groups Ashiyane Digital Security Team and Sun Army.
He allegedly managed the Mersad botnet used for the DDoS attacks. Ahmadzadegan was also allegedly involved in providing training to Iranian intelligence personnel.
During the DDoS attacks, Ahmadzadegan allegedly accessed and issued commands to the Kamikaze botnet. On January 21, 2016, a grand jury in the United States District Court, Southern District of New York, indicted Ahmadzadegan for his alleged involvement in the scheme and a federal warrant was issued for his arrest after he was charged with conspiracy to commit, and aid and abet, computer intrusion.
Remarks: Ahmadzadegan is known to speak Farsi and is thought to be living in Iran.
Timeline of Events
📋
2012-01-01
DDoS Campaign Begins
Coordinated distributed denial of service attacks against U.S. financial sector and companies commence
📋
2013-12-31
DDoS Campaign Ends
DDoS attack campaign concludes after approximately two years of activity
🕵️
2016-01-21
Federal Indictment
Grand jury in U.S. District Court, Southern District of New York, indicts Ahmadzadegan for conspiracy to commit and aid and abet computer intrusion; federal warrant issued for arrest
Case Information
Incident:January 1, 2012
Last Updated:May 12, 2026
Leave a comment
Comments
Case Information
Incident:January 1, 2012
Last Updated:May 12, 2026