The person at the center of this case
Multiple targets: 2024 U.S. Presidential Campaign personnel and Iran/Middle East affairs experts
Cold Case · Open
1 year waiting · since 2024
THREE IRANIAN CYBER ACTORS
Justice for Multiple targets: 2024 U.S. Presidential Campaign personnel and Iran/Middle East affairs experts — the trail went cold in 2024, but the truth hasn't.
Start here
Key leads to think about
🎯
suspect
Lead #1What operational infrastructure and command-and-control networks supported these three actors' cyber campaigns?
🔍
evidence
Lead #2What specific phishing campaigns, malware, or data exfiltration techniques were used against 2024 campaign personnel?
👤
person
Lead #3How many individuals and organizations were successfully compromised, and what sensitive information was obtained?
Three Iranian cyber actors—Seyyed Ali Aghamiri, Yasar Balaghi, and Masoud Jalili—are wanted for alleged participation in advanced persistent threat (APT) activity linked to Iran's Islamic Revolutionary Guard Corps (IRGC). From 2019 to present, they allegedly targeted individuals associated with the 2024 U.S. Presidential Campaigns and personnel with expertise in Iranian and Middle Eastern affairs, including government officials, think tank experts, journalists, and activists. Federal arrest warrants were issued on September 27, 2024, in Washington, D.C., for multiple cyber crimes including wire fraud, identity theft, and unauthorized computer access.
Case
#869
Federal Bureau of Investigation (FBI); U.S. District Court, District of Columbia
Try asking
Claim this imported case
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
10 uploads25 AI questions/day
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
More leads to consider
Beyond the top three above — each detail below could be the thread that pulls this case open.
📞
contact
Lead #4Were these three actors working directly with IRGC handlers, and what was the chain of command?
💡
clue
Lead #5Have any of the three actors been located, and are they believed to still be operating from Iranian territory?
Have information about any of these leads?
Even the smallest detail could be the key to solving this case.
Official wording
Source Narrative
Conspiracy to Obtain Information from a Protected Computer; Defraud and Obtain a Thing of Value; Commit Fraud Involving Authentication Features; Commit Aggravated Identity Theft; Commit Access Device Fraud; Commit Wire Fraud While Falsely Registering Domains; Wire Fraud; Aggravated Identify Theft; Aiding and Abetting; Material Support to Designated Foreign Terrorist Organization Caution: Seyyed Ali Aghamiri , Yasar Balaghi , and Masoud Jalili are wanted for their alleged participation in malicious cyber activity associated with advanced persistent threat (APT) actors affiliated with the Iranian Government’s Islamic Revolutionary Guard Corps (IRGC). The alleged IRGC cyber activity targeted various individuals associated with the 2024 United States Presidential Campaigns, as well as personnel with a nexus to Iranian and Middle Eastern affairs, such as current or former senior government officials, senior think tank personnel, journalists, activists, and lobbyists from 2019 to present day.
Federal arrest warrants were issued for each of the men in the United States District Court, District of Columbia, Washington, D.C., on September 27, 2024, after they were charged with multiple cyber-related crimes.
Timeline of Events
🕵️
2019-01-01
Alleged cyber activity period begins
IRGC-affiliated APT actors allegedly begin targeting U.S. and international personnel
🕵️
2024-09-27
Federal arrest warrants issued
Three Iranian cyber actors charged with conspiracy, fraud, identity theft, and wire fraud in U.S. District Court, District of Columbia
Key Locations
Interactive map showing important locations related to this case
Case Information
Incident:January 1, 2019
Last Updated:April 29, 2026
Up to $10 Reward
For information leading to the resolution of this case
Leave a comment
Comments
Case Information
Incident:January 1, 2019
Last Updated:April 29, 2026
Up to $10 Reward
For information leading to the resolution of this case