The person at the center of this case
Multiple individuals associated with 2024 U.S. Presidential Campaigns and Iranian/Middle Eastern affairs personnel
Cold Case · Open
1 year waiting · since 2024
THREE IRANIAN CYBER ACTORS
Justice for Multiple individuals associated with 2024 U.S. Presidential Campaigns and Iranian/Middle Eastern affairs personnel — the trail went cold in 2024, but the truth hasn't.
Start here
Key leads to think about
🎯
suspect
Lead #1What specific targeting methods and malware tools were used by these IRGC-affiliated actors?
🔍
evidence
Lead #2What communications or digital forensics link these three individuals to the alleged campaign targeting?
👤
person
Lead #3How many victims were compromised, and what sensitive information was accessed or exfiltrated?
Three Iranian cyber actors—Seyyed Ali Aghamiri, Yasar Balaghi, and Masoud Jalili—are wanted for alleged participation in advanced persistent threat (APT) activity affiliated with Iran's Islamic Revolutionary Guard Corps (IRGC). From 2019 to present, they allegedly targeted individuals associated with the 2024 U.S. Presidential Campaigns and personnel with connections to Iranian and Middle Eastern affairs, including government officials, think tank researchers, journalists, and activists. Federal arrest warrants were issued on September 27, 2024, in the U.S. District Court for the District of Columbia on charges including wire fraud, identity theft, and material support to a designated foreign terrorist organization.
Case
#869
Federal Bureau of Investigation (FBI); U.S. District Court, District of Columbia
Try asking
Claim this imported case
A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.
10 uploads25 AI questions/day
This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.
More leads to consider
Beyond the top three above — each detail below could be the thread that pulls this case open.
💡
clue
Lead #4Are these actors still actively conducting cyber operations, or have they ceased activity since the warrants?
Have information about any of these leads?
Even the smallest detail could be the key to solving this case.
Official wording
Source Narrative
Conspiracy to Obtain Information from a Protected Computer; Defraud and Obtain a Thing of Value; Commit Fraud Involving Authentication Features; Commit Aggravated Identity Theft; Commit Access Device Fraud; Commit Wire Fraud While Falsely Registering Domains; Wire Fraud; Aggravated Identify Theft; Aiding and Abetting; Material Support to Designated Foreign Terrorist Organization Caution: Seyyed Ali Aghamiri , Yasar Balaghi , and Masoud Jalili are wanted for their alleged participation in malicious cyber activity associated with advanced persistent threat (APT) actors affiliated with the Iranian Government’s Islamic Revolutionary Guard Corps (IRGC). The alleged IRGC cyber activity targeted various individuals associated with the 2024 United States Presidential Campaigns, as well as personnel with a nexus to Iranian and Middle Eastern affairs, such as current or former senior government officials, senior think tank personnel, journalists, activists, and lobbyists from 2019 to present day.
Federal arrest warrants were issued for each of the men in the United States District Court, District of Columbia, Washington, D.C., on September 27, 2024, after they were charged with multiple cyber-related crimes.
Timeline of Events
🕵️
2019
Alleged IRGC cyber activity begins
Malicious cyber activity targeting begins and continues through present day
🕵️
2024-09-27
Federal arrest warrants issued
Three Iranian cyber actors charged in U.S. District Court, District of Columbia with multiple cyber-related crimes
Key Locations
Interactive map showing important locations related to this case
Case Information
Incident:January 1, 2019
Last Updated:September 12, 2026
Up to $10 Reward
For information leading to the resolution of this case
Leave a comment
Comments
Case Information
Incident:January 1, 2019
Last Updated:September 12, 2026
Up to $10 Reward
For information leading to the resolution of this case