The person at the center of this case
U.S. Presidential Campaign personnel and officials with nexus to Iranian and Middle Eastern affairs
Cold Case · Open
2 years waiting · since 2024
THREE IRANIAN CYBER ACTORS
Justice for U.S. Presidential Campaign personnel and officials with nexus to Iranian and Middle Eastern affairs — the trail went cold in 2024, but the truth hasn't.
Start here
Key leads to think about
🎯
suspect
Lead #1What is the current location and operational status of these three Iranian cyber actors?
🔍
evidence
Lead #2What specific cyber intrusion techniques and malware were used in the IRGC-affiliated APT operations?
👤
person
Lead #3How many individuals and organizations were successfully compromised or targeted by this cyber campaign?
Three Iranian cyber actors—Seyyed Ali Aghamiri, Yasar Balaghi, and Masoud Jalili—are wanted for alleged participation in advanced persistent threat (APT) operations affiliated with Iran's Islamic Revolutionary Guard Corps (IRGC). Between 2019 and present day, they allegedly targeted U.S. Presidential Campaign personnel and officials involved in Iranian and Middle Eastern affairs through malicious cyber activity. Federal arrest warrants were issued on September 27, 2024, in Washington, D.C., and the case remains active as authorities seek to locate and apprehend these individuals.
Case
#869
Federal Bureau of Investigation (FBI); U.S. District Court, District of Columbia
Try asking
Claim this imported case
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
10 uploads25 AI questions/day
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
More leads to consider
Beyond the top three above — each detail below could be the thread that pulls this case open.
💡
clue
Lead #4What role do these actors play within the broader IRGC cyber operations structure?
Have information about any of these leads?
Even the smallest detail could be the key to solving this case.
Official wording
Source Narrative
Conspiracy to Obtain Information from a Protected Computer; Defraud and Obtain a Thing of Value; Commit Fraud Involving Authentication Features; Commit Aggravated Identity Theft; Commit Access Device Fraud; Commit Wire Fraud While Falsely Registering Domains; Wire Fraud; Aggravated Identify Theft; Aiding and Abetting; Material Support to Designated Foreign Terrorist Organization Caution: Seyyed Ali Aghamiri , Yasar Balaghi , and Masoud Jalili are wanted for their alleged participation in malicious cyber activity associated with advanced persistent threat (APT) actors affiliated with the Iranian Government’s Islamic Revolutionary Guard Corps (IRGC). The alleged IRGC cyber activity targeted various individuals associated with the 2024 United States Presidential Campaigns, as well as personnel with a nexus to Iranian and Middle Eastern affairs, such as current or former senior government officials, senior think tank personnel, journalists, activists, and lobbyists from 2019 to present day.
Federal arrest warrants were issued for each of the men in the United States District Court, District of Columbia, Washington, D.C., on September 27, 2024, after they were charged with multiple cyber-related crimes.
Timeline of Events
🕵️
2019-01-01
APT Campaign Begins
Alleged IRGC-affiliated cyber activity targeting U.S. officials and campaign personnel begins
🕵️
2024-09-27
Federal Arrest Warrants Issued
Warrants issued for Seyyed Ali Aghamiri, Yasar Balaghi, and Masoud Jalili in U.S. District Court, District of Columbia
Key Locations
Interactive map showing important locations related to this case
Case Information
Incident:January 1, 2019
Last Updated:October 29, 2026
Up to $10 Reward
For information leading to the resolution of this case
Leave a comment
Comments
Case Information
Incident:January 1, 2019
Last Updated:October 29, 2026
Up to $10 Reward
For information leading to the resolution of this case