The person at the center of this case
U.S. Presidential Campaign personnel and government officials with Iranian/Middle Eastern expertise
Cold Case · Open
1 year waiting · since 2024
THREE IRANIAN CYBER ACTORS
Justice for U.S. Presidential Campaign personnel and government officials with Iranian/Middle Eastern expertise — the trail went cold in 2024, but the truth hasn't.
Start here
Key leads to think about
🎯
suspect
Lead #1Where are Seyyed Ali Aghamiri, Yasar Balaghi, and Masoud Jalili currently located?
🔍
evidence
Lead #2What specific targeting methods and malware were used in the IRGC cyber operations?
👤
person
Lead #3Which U.S. officials, journalists, and activists were compromised or targeted?
Three Iranian cyber actors—Seyyed Ali Aghamiri, Yasar Balaghi, and Masoud Jalili—are wanted for their alleged roles in sophisticated cyberattacks targeting U.S. Presidential Campaign personnel and officials with expertise in Iranian and Middle Eastern affairs from 2019 to present. The attacks, attributed to Iran's Islamic Revolutionary Guard Corps (IRGC), involved identity theft, wire fraud, and unauthorized access to protected computers. Federal arrest warrants were issued in September 2024, and their whereabouts remain unknown, making public awareness critical to locating these individuals.
Case
#869
United States (distributed targets)
Federal Bureau of Investigation (FBI); U.S. District Court, District of Columbia
Try asking
Claim this imported case
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
10 uploads25 AI questions/day
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
More leads to consider
Beyond the top three above — each detail below could be the thread that pulls this case open.
💡
clue
Lead #4What infrastructure or financial networks supported these Iranian cyber operations?
⏰
timeline
Lead #5What was the scope and scale of the targeting from 2019 through present day?
Have information about any of these leads?
Even the smallest detail could be the key to solving this case.
Official wording
Source Narrative
Conspiracy to Obtain Information from a Protected Computer; Defraud and Obtain a Thing of Value; Commit Fraud Involving Authentication Features; Commit Aggravated Identity Theft; Commit Access Device Fraud; Commit Wire Fraud While Falsely Registering Domains; Wire Fraud; Aggravated Identify Theft; Aiding and Abetting; Material Support to Designated Foreign Terrorist Organization Caution: Seyyed Ali Aghamiri , Yasar Balaghi , and Masoud Jalili are wanted for their alleged participation in malicious cyber activity associated with advanced persistent threat (APT) actors affiliated with the Iranian Government’s Islamic Revolutionary Guard Corps (IRGC). The alleged IRGC cyber activity targeted various individuals associated with the 2024 United States Presidential Campaigns, as well as personnel with a nexus to Iranian and Middle Eastern affairs, such as current or former senior government officials, senior think tank personnel, journalists, activists, and lobbyists from 2019 to present day.
Federal arrest warrants were issued for each of the men in the United States District Court, District of Columbia, Washington, D.C., on September 27, 2024, after they were charged with multiple cyber-related crimes.
Timeline of Events
🕵️
2019
Cyber campaign begins
IRGC-affiliated cyber actors begin targeting U.S. officials and campaign personnel
🕵️
2024-09-27
Federal arrest warrants issued
Warrants issued in U.S. District Court, District of Columbia for Aghamiri, Balaghi, and Jalili on multiple cyber-related charges
Case Information
Incident:January 1, 2019
Last Updated:June 14, 2026
Up to $10 Reward
For information leading to the resolution of this case
Leave a comment
Comments
Case Information
Incident:January 1, 2019
Last Updated:June 14, 2026
Up to $10 Reward
For information leading to the resolution of this case