Iranian Nationals Indicted for Cyber-Enabled Campaign to Compromise US Government and Private Entities, Financial Fraud

Four Iranian Nationals Charged with Conspiring to Commit Computer Fraud, Wire Fraud, and Other Financial Crimes

A federal grand jury has indicted four Iranian nationals for their involvement in a sophisticated cyber-enabled campaign aimed at compromising the United States government and private entities, including defense contractors and two New York-based companies. The indictment alleges that Hossein Harooni, Reza Kazemifar, Komeil Baradaran Salmani, and Alireza Shafie Nasab conspired to commit computer fraud, wire fraud, and other financial crimes between 2016 and 2021.

Details of the Conspiracy

According to court documents, the defendants were members of a hacking organization that targeted more than a dozen US companies, including defense contractors and two New York-based firms, as well as the US Departments of Treasury and State. The group used spearphishing and social engineering tactics to compromise employee accounts and deploy malware onto victim computers.

Roles of the Defendants

• Kazemifar was responsible for testing tools used by the conspiracy to execute cyber campaigns.
• Harooni procured and managed online network infrastructure used to facilitate computer intrusions.
• Salmani tested spearphishing emails and maintained infrastructure used by the conspirators.
• Nasab procured infrastructure used in social engineering campaigns.

Charges and Penalties

The defendants are charged with: + Conspiracy to commit computer fraud + Conspiracy to commit wire fraud + Wire fraud, among other counts If convicted, they face up to: + Five years in prison for the computer fraud conspiracy + 20 years in prison for each count of wire fraud and conspiracy to commit wire fraud

Investigation and Prosecution

This case is being investigated by the FBI Cyber Division and prosecuted by the US Attorney’s Office for the Southern District of New York.

Significance of the Indictment

The indictment marks a significant escalation in the US government’s efforts to combat Iranian cyber threats. In recent years, Iran has been accused of launching multiple high-profile cyber attacks on US financial institutions, companies, and government agencies.

Current Status of the Defendants

The defendants are currently at large, and it is unclear whether they will be extradited to the United States to face trial. The indictment serves as a reminder of the growing threat posed by Iranian cyber actors and the need for increased vigilance and cooperation between law enforcement agencies around the world.