FBI sanctions listing
IRANIAN CYBER ACTORS
IRANIAN CYBER ACTORS is an individual designated on the U.S. Federal Bureau of Investigation — Wanted (FBI) sanctions list under the Cyber's Most Wanted, Iran programmes, listed on 2022-07-28. Cyber's Most Wanted, Iran. This page summarises the public designation — known aliases, identifying particulars, the stated reason for listing and linked parties — alongside an independent, transparent risk indicator.
Reason for listing
Conspiracy to Commit Fraud and Related Activity in Connection with Computers; Intentional Damage to a Protected Computer; Transmitting a Demand in Relation to Damaging a Protected Computer Mansour Ahmadi , Ahmad Khatibi Aghda , and Amir Hossein Nickaein Ravari are wanted for their alleged involvement in a coordinated campaign which compromised hundreds of computer networks across the United States and abroad. Between October 2020 and August 2022, the three men allegedly gained unauthorized access to protected networks, exfiltrated data, encrypted computer systems, and extorted victims for ransom, causing damage to and disrupting operations of organizations across multiple sectors, including critical infrastructure, government agencies, and non-profit organizations. On August 10, 2022, a federal grand jury sitting in the United States District Court for the District of New Jersey in Newark, New Jersey, indicted Mansour Ahmadi, Ahmad Khatibi Aghda, and Amir Hossein Nickaein Ravari on charges of conspiracy to commit fraud and related activity in connection with computers, intentional damage to a protected computer, and transmitting a demand in relation to damaging a protected computer. The Rewards for Justice Program, United States Department of State, is offering a reward of up to $10 million for information on or about the activities of Mansour Ahmadi, Ahmad Khatibi Aghda, and Amir Hossein Nickaein Ravari.
Statement of reasons as published by US FBI. This is the issuing authority's wording, reproduced for reference.
Designation record
| List / authority | US FBI (FBI) — FBI — Cyber's Most Wanted |
|---|---|
| Entity type | Person |
| Programmes / regime | Cyber's Most WantedIran |
| Date listed | 2022-07-28 |
| Source record ID | fbi:d16d3ef70c0c4d9ba5cb02a8242df44e |
| Last updated (our copy) | 2026-06-04 |
Identity & particulars
| Position / role | Cyber's Most Wanted, Iran |
|---|
Deep-research dossier
Not yet deep-researched
The instant review above is drawn from the public lists. A deep-research dossier goes much further — an analyst-grade OSINT report: associate & co-investment network screening, structural / ownership opacity, a dated risk trajectory, an 8-factor scoring model, and numbered, source-linked evidence. See the format in the design system.
Clarifications & right of reply
Are you IRANIAN CYBER ACTORS, or an authorised representative?
You — or your counsel or agent — can file a clarification and supporting documents against this record. Filings are reviewed and verified before anything is published; submissions are never posted automatically.
File a clarification or document
Source & provenance
| Issuing authority | U.S. Federal Bureau of Investigation — Wanted |
|---|---|
| Source identifier | fbi:d16d3ef70c0c4d9ba5cb02a8242df44e |
| Aggregated by | Sanctiometer (independent) — verify against the issuing authority's official list before acting. |