US Offers $10 Million Reward for Information on Two Iranians Accused of Cyberattacks Targeting Critical Infrastructure

The US Department of State's Rewards for Justice (RFJ) Program announced today, Wednesday, a reward of up to $10 million for information leading to the identification or location of two Iranian individuals, Fatemeh Sedighian Kashani and Mohammad Baqer Shirinkar.

The statement clarified that the reward is for information on any person acting at the direction or under the control of a foreign government in malicious cyber activities against US critical infrastructure and violating the Computer Fraud and Abuse Act.

Details of Involvement and Targeted Entities:

• "Shahid Shoushtari" Group: Mohammad Baqer Shirinkar oversees the "Shahid Shoushtari" group, a malicious cyber organization affiliated with the Iranian Islamic Revolutionary Guard Corps Cyber Command.

• Individuals: Fatemeh Sedighian Kashani is a long-time employee of the group, working closely with Shirinkar in planning and executing cyber operations.

• Damages: Members of the group have caused significant financial harm and disruption to US companies and government agencies through coordinated, internet-enabled cyber operations.

• Targeted Infrastructure: These campaigns targeted critical infrastructure sectors including news, shipping, travel, energy, finance, and communications in the US, Europe, and the Middle East.

Interference in US Elections:

• In August 2020, representatives of the group launched a multi-faceted campaign targeting the US Presidential Election.

• In November 2021, the US Department of the Treasury sanctioned the group and six of its personnel for attempting to influence the 2020 election.

The RFJ statement concluded by urging anyone with information about Shirinkar, Kashani, or the group's malicious activities to contact the program via its secure reporting channel.