CrimeOwl AI logoCrimeOwl AI
CasesBlogPricingAboutLaw Enforcement
  1. Home
  2. /
  3. Cases
  4. /
  5. THREE IRANIAN CYBER ACTORS
Back to CasesMore Cases
Multiple individuals associated with 2024 U.S. Presidential Campaigns and Iranian/Middle Eastern affairs personnel

The person at the center of this case

Multiple individuals associated with 2024 U.S. Presidential Campaigns and Iranian/Middle Eastern affairs personnel

Case
#869
SourceFBI WantedUpdated Mar 15, 2026
Federal Bureau of Investigation (FBI); U.S. District Court, District of Columbia
Cold Case · Open
2 years waiting · since 2024

THREE IRANIAN CYBER ACTORS

Justice for Multiple individuals associated with 2024 U.S. Presidential Campaigns and Iranian/Middle Eastern affairs personnel — the trail went cold in 2024, but the truth hasn't.

Start here

Key leads to think about

🎯
suspect
Lead #1

What is the current location and operational status of Seyyed Ali Aghamiri, Yasar Balaghi, and Masoud Jalili?

🔍
evidence
Lead #2

What specific malware, phishing campaigns, or intrusion techniques were used in the targeting of 2024 Presidential Campaign personnel?

👤
person
Lead #3

How many individuals and organizations were successfully compromised or targeted by these IRGC-affiliated cyber actors?

Three Iranian cyber actors—Seyyed Ali Aghamiri, Yasar Balaghi, and Masoud Jalili—are wanted for alleged participation in advanced persistent threat (APT) operations affiliated with Iran's Islamic Revolutionary Guard Corps (IRGC). From 2019 to present, they allegedly targeted individuals associated with the 2024 U.S. Presidential Campaigns and personnel with ties to Iranian and Middle Eastern affairs, including government officials, think tank researchers, journalists, and activists. Federal arrest warrants were issued on September 27, 2024, in Washington, D.C., and the FBI seeks information leading to their location and apprehension.

Case
#869
SourceFBI WantedUpdated Mar 15, 2026
Federal Bureau of Investigation (FBI); U.S. District Court, District of Columbia

Try asking

Claim this imported case

A one-time $10 claim transfers this imported case workspace to your account. You get 10 uploads for this case, 25 daily AI questions for this case, and public tips with files route to you.

10 uploads25 AI questions/day

This does not start a subscription. When the included limits are reached, the Personal plan unlocks more workspace capacity.

More leads to consider

Beyond the top three above — each detail below could be the thread that pulls this case open.

📞
contact
Lead #4

What communication channels or infrastructure did these actors use to coordinate their operations?

💡
clue
Lead #5

Are there connections between these three actors and other known IRGC cyber units or APT groups?

Have information about any of these leads?

Even the smallest detail could be the key to solving this case.

Official wording

Source Narrative

Conspiracy to Obtain Information from a Protected Computer; Defraud and Obtain a Thing of Value; Commit Fraud Involving Authentication Features; Commit Aggravated Identity Theft; Commit Access Device Fraud; Commit Wire Fraud While Falsely Registering Domains; Wire Fraud; Aggravated Identify Theft; Aiding and Abetting; Material Support to Designated Foreign Terrorist Organization Caution: Seyyed Ali Aghamiri , Yasar Balaghi , and Masoud Jalili are wanted for their alleged participation in malicious cyber activity associated with advanced persistent threat (APT) actors affiliated with the Iranian Government’s Islamic Revolutionary Guard Corps (IRGC). The alleged IRGC cyber activity targeted various individuals associated with the 2024 United States Presidential Campaigns, as well as personnel with a nexus to Iranian and Middle Eastern affairs, such as current or former senior government officials, senior think tank personnel, journalists, activists, and lobbyists from 2019 to present day.

Federal arrest warrants were issued for each of the men in the United States District Court, District of Columbia, Washington, D.C., on September 27, 2024, after they were charged with multiple cyber-related crimes.

Timeline of Events

🕵️
2019-01-01

Alleged cyber activity begins

APT operations targeting U.S. individuals and officials allegedly commence

🕵️
2024-09-27

Federal arrest warrants issued

Warrants issued in U.S. District Court, District of Columbia for Seyyed Ali Aghamiri, Yasar Balaghi, and Masoud Jalili

Key Locations
Interactive map showing important locations related to this case

Case Information

Incident:January 1, 2019
Last Updated:September 27, 2026

Up to $10 Reward

For information leading to the resolution of this case

Leave a comment

Comments

Case Information

Incident:January 1, 2019
Last Updated:September 27, 2026

Up to $10 Reward

For information leading to the resolution of this case