Unmasking the Cyber Threat: $10 Million Reward for Information on Iranian Hackers

In recent years, the world has witnessed a surge in cyber threats originating from Iran, with hackers engaging in sophisticated attacks targeting various entities, including government agencies, businesses, and critical infrastructure. The United States has taken a firm stance against these malicious activities, offering substantial rewards for information leading to the identification and capture of these cyber criminals.

The Cyber Campaigns and Rewards

One notable case involves Alireza Shafie Nasab, an Iranian hacker allegedly involved in a coordinated, multi-year cyber campaign that targeted over 12 US companies, as well as government departments like the State and Treasury. The US Department of State's Rewards for Justice program has issued a reward of up to $10 million for information on Nasab's activities, linking him to Iran's Islamic Revolutionary Guard Corps (IRGC), a designated Foreign Terrorist Organization.

In a notable case, Alireza Shafie Nasab, an Iranian hacker, is alleged to have been involved in a multi-year cyber campaign that targeted over 12 U.S. companies, as well as government departments like the State and Treasury. Nasab, who is believed to have worked for Iran-based Mahak Rayan Afraz, a front company operating on behalf of Iran's Islamic Revolutionary Guard Corps (IRGC), a U.S.-designated Foreign Terrorist Organization and a Specially Designated Global Terrorist entity, has been charged by the U.S. Department of Justice for his activities.

The campaign, which ran from approximately 2016 through April 2021, is said to have compromised over 200,000 victim devices, many of which contained sensitive or classified defense information. The hackers used spear-phishing and other hacking techniques to infect victim devices, with Nasab accused of procuring infrastructure utilized in the campaign by using the stolen identity of a real person to register a server and email accounts.

The U.S. Department of State's Rewards for Justice program has issued a reward of up to $10 million for information on Nasab's activities, highlighting the significance of his alleged role in the cyber campaign. This case underscores the ongoing efforts of Iranian hackers to target U.S. entities and the international response to combat these cyber threats.

23rd April, Justice Department has unsealed indictments against four Iranian nationals, Hossein Harooni, Reza Kazemifar, Komeil Baradaran Salmani, and Alireza Shafie Nasab, for their involvement in a cyber-enabled campaign targeting U.S. government and private entities.

Impact of Iranian Hackers

Iranian hackers, both state-sponsored and independent groups like Black Reward, have caused significant disruptions through ransomware attacks, data exfiltration, and encryption of sensitive information. These cyber actors have targeted a wide range of organizations globally, including small businesses, government agencies, nonprofits, and critical infrastructure sectors like healthcare, transportation, and utilities.

Recent Developments and Ongoing Threats

Recent indictments by the US Department of Justice have highlighted the activities of Iranian nationals like Mansour Ahmadi, Ahmad Khatibi Aghda, and Amir Hossein Nickaein Ravari, who remain at large. These individuals are accused of conducting ransomware attacks against organizations in the US, UK, Israel, and even within Iran. Their actions have led to data breaches, encryption of information, and extortion of victims across various sectors.

Timeline of Attacks and Response

The cyber-attacks orchestrated by Iranian threat actors have been ongoing for years, with notable incidents occurring from 2016 through 2021. These attacks have exploited vulnerabilities in systems, utilized tools like BitLocker, PowerShell scripts, and malware such as TunnelFish, and targeted organizations worldwide. The FBI, CISA, and other cybersecurity agencies have been actively monitoring and responding to these threats to safeguard critical infrastructure and sensitive data.

September 14, 2022:

The U.S Department of State's Rewards for Justice Program offered up to $10 million for information leading to the identification or location of Mansour Ahmadi, Ahmad Khatibi Aghda, and Amir Hossein Nickaein Ravari on September 14, 2022. These Iranian nationals were charged by the U.S. Department of Justice for a scheme to hack computer systems of hundreds of victims in the United States, Britain, Israel, Iran, and elsewhere.

September 14, 2022: 

The United States sanctioned 10 Iranian men and two companies for hacking computer systems and installing ransomware, which can prevent victims from getting access to their files and data unless they pay a ransom to the hackers. This action was part of a joint effort with the Department of Justice, Department of State, Federal Bureau of Investigation, U.S. Cyber Command, National Security Agency, and Cybersecurity and Infrastructure Security Agency.

2016 to April 2021:

 Alireza Shafie Nasab, an Iranian national, allegedly participated in a coordinated, multi-year cyber campaign that targeted more than 12 US companies, as well as the departments of State and the Treasury. Nasab worked for Iran-based Mahak Rayan Afraz, a front company operating on behalf of Iran's Islamic Revolutionary Guard Corps (IRGC), a U.S.-designated Foreign Terrorist Organization and a Specially Designated Global Terrorist entity.

Conclusion and Call to Action

The prevalence of Iranian hackers in the cyber landscape underscores the importance of cybersecurity measures and international cooperation to combat such threats effectively. The rewards offered for information on these hackers serve as a deterrent and a means to hold perpetrators accountable for their actions. As the global community continues to face evolving cyber challenges, vigilance, collaboration, and information sharing are crucial in mitigating the risks posed by malicious actors. This blog provides an overview of the rewards offered for information on Iranian hackers, their cyber exploits, impacts on various sectors, recent developments, and the ongoing efforts to address these threats professionally and comprehensively.

Related Article

US govt sanctions Iranians linked to government cyberattacks.

US State Department investigates alleged theft of government data.

US State Department Offers $10 Million Reward for Information on Iranian Spearphisher