The person at the center of this case
United States financial sector and companies
Cold Case · Open
10 years waiting · since 2016
OMID GHAFFARINIA
Justice for United States financial sector and companies — the trail went cold in 2016, but the truth hasn't.
Start here
Key leads to think about
🎯
suspect
Lead #1What is Ghaffarinia's current location and operational status within Iran?
🔍
evidence
Lead #2How many computer systems were compromised across the U.S., U.K., and Israel through the Mersad and Kamikaze botnets?
📞
contact
Lead #3What are the connections between Mersad, Ashiyane Digital Security Team, and Sun Army?
Omid Ghaffarinia is wanted for his role in a coordinated conspiracy to conduct distributed denial of service (DDoS) attacks against U.S. financial institutions and companies between 2012 and 2013. As co-founder of Mersad, a computer security company working for the Iranian Government, and a member of Iran-based hacking groups, he allegedly created malware and attack scripts used in major botnet operations. Ghaffarinia remains at large and is believed to be living in Iran, making his apprehension dependent on international cooperation and intelligence.
Case
#625
Federal Bureau of Investigation (FBI) / United States District Court, Southern District of New York
Try asking
Claim this imported case
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
10 uploads25 AI questions/day
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
More leads to consider
Beyond the top three above — each detail below could be the thread that pulls this case open.
💡
clue
Lead #4Can international cybersecurity cooperation lead to identification of co-conspirators or financial beneficiaries?
Have information about any of these leads?
Even the smallest detail could be the key to solving this case.
Official wording
Source Narrative
Conspiracy to Commit, and Aid and Abet, Computer Intrusion Caution: Omid Ghaffarinia is wanted for his alleged involvement in a conspiracy to conduct a coordinated campaign of distributed denial of service ("DDoS") attacks against the United States financial sector and other United States companies from 2012 through 2013. Ghaffarinia was the co-founder of Mersad, a private computer security company that performed work on behalf of the Iranian Government, and a former member of the Iran-based computer hacking groups Ashiyane Digital Security Team and Sun Army.
He allegedly created malware to remotely compromise computer systems that formed part of the Mersad botnet that was used to conduct the DDoS attacks and also allegedly authored the attack script used by the Kamikaze botnet. Ghaffarinia has claimed to have successfully compromised thousands of computer servers based in the United States, the United Kingdom, and Israel.
On January 21, 2016, a grand jury in the United States District Court, Southern District of New York, indicted Ghaffarinia for his alleged involvement in the scheme and a federal warrant was issued for his arrest after he was charged with conspiracy to commit, and aid and abet, computer intrusion. Remarks: Ghaffarinia is known to speak Farsi and is thought to be living in Iran.
Timeline of Events
📋
2012-01-01
DDoS Campaign Begin
Coordinated campaign of distributed denial of service attacks against U.S. financial sector and other companies begins
📋
2013-12-31
DDoS Campaign End
Coordinated DDoS attack campaign concludes
🕵️
2016-01-21
Federal Indictment
Grand jury in U.S. District Court, Southern District of New York indicts Ghaffarinia for conspiracy to commit and aid and abet computer intrusion; federal warrant issued for arrest
Key Locations
Interactive map showing important locations related to this case
Case Information
Incident:January 1, 2012
Last Updated:September 10, 2026
Leave a comment
Comments
Case Information
Incident:January 1, 2012
Last Updated:September 10, 2026