The U.S. Department of Justice unsealed an indictment against Alireza Shafie Nasab, an Iranian national, for his alleged involvement in a multi-year hacking campaign targeting critical U.S. entities.

According to the indictment, Nasab, who remains at large, participated in a coordinated cyber operation from at least 2016 to 2021. The campaign targeted the U.S. Departments of Treasury and State, along with defense contractors, a New York-based accounting firm, and a hospitality company.

Prosecutors allege that Nasab and his co-conspirators used a combination of deceptive tactics to compromise victim systems. These tactics included spear phishing emails, social engineering techniques like impersonation, and the exploitation of stolen identities. The campaign reportedly compromised over 200,000 devices, potentially exposing sensitive information.

“While purporting to work as a cybersecurity specialist for Iran-based clients, Mr. Nasab allegedly participated in a persistent campaign to compromise U.S. private sector and government computer systems,” said Assistant Attorney General Matthew G. Olsen of the Justice Department’s National Security Division. “Today’s charges highlight Iran’s corrupt cyber ecosystem, in which criminals are given free rein to target computer systems abroad and threaten U.S. sensitive information and critical infrastructure. Our National Security Cyber Section remains focused on disputing these cross-border hacking schemes and holding those responsible to account.”

The indictment further details Nasab’s alleged role in procuring infrastructure used by the hacking group and his use of stolen identities to register online accounts used in the attacks. Notably, Nasab is accused of working for Mahak Rayan Afraz, an Iranian company that purportedly offered cybersecurity services but is suspected of being a front for the hacking operation.

Nasab faces a range of charges, including conspiracy to commit computer fraud, wire fraud, and aggravated identity theft. Each charge carries significant penalties, and a federal court judge will determine the final sentence if Nasab is apprehended.

Concurrent with the unsealing of the indictment, the U.S. Department of State’s Rewards for Justice Program announced a reward of up to $10 million for information leading to Nasab’s identification or location. Anyone with information is encouraged to contact Rewards for Justice via their Tor-based tips-reporting channel at:

he5dybnt7sr6cm32xt77pazmtm65flqy6irivtflruqfc5ep7eiodiad.onion (Tor browser is required).