An Iranian national indicted in the US for hacking hundreds of organizations was extradited from Montenegro this week.
Acting on an arrest warrant issued by the FBI, Montenegrin authorities arrested the individual, a dual citizen of Turkey and Iran, on June 25.
The suspect is accused of involvement in numerous cyberattacks against US organizations starting in 2013. The attacks caused losses of more than $3.4 billion.
The Montenegrin authorities did not name the individual, but mentioned his initials, A.B., and that he is 40 years old.
In August, the US unsealed a 14-count superseding indictment charging 17 members of the Iran-based company Mabna Institute for hacking activities targeting hundreds of entities in the US and abroad.
The indictment names Amir Barati as one of the Mabna Institute members who performed the intrusions on behalf of both the Islamic Republic of Iran’s Islamic Revolutionary Guard Corps (IRGC) and private organizations.
According to the indictment, the suspects launched attacks against 144 universities in the US and 178 abroad, 42 private companies in the US and 11 abroad, five US government agencies, and at least two NGOs.
The individuals stole over 31 terabytes of scientific resources, including academic data and intellectual property, as well as employee email accounts. The stolen information was handed over to the Iranian government and sold to Iranian universities.
The US government is offering rewards of up to $10 million for information on five of the Iranian hackers, namely Mesri, Galekuhi, Kahzadian, Fayaz, and Ballojeh.
Extraditions of Iranian state-linked hackers to face trial in the US are extremely rare, as threat actors affiliated with the regime typically operate from inside Iran and avoid traveling to jurisdictions with US extradition treaties.
According to Iran International, Barati moved to Turkey in 2021, where he later became a citizen and legally changed his first and last names.
Related: Police Shut Down KillSec Ransomware, Identify Alleged Teen Leader
Related: Treasury Blacklists Most-Wanted ATM Malware Developer and His Network
Related: ShinyHunters Defiant After FBI Calls on Members to Come Forward
Related: Prison Sentence for Former US Soldier Who Hacked AT&T and Verizon
