Suriya Elektron Armiyasi (SEA) bilan bog'liq suriyalik erkak AQShda 42 oylik qamoq jazosiga hukm qilindi, bu birinchi marta ayblov e'lon qilinganidan 12 yildan ortiq vaqt o'tganidan keyin sodir bo'ldi.
Ahmad Umar Agha, onlayn taxallusi Th3Pr0 bo'lgan shaxs, payshanba kuni Virjiniya shtatining Sharqiy okrugidagi federal sud tomonidan hukm qilindi. Adliya vazirligining ma'lumotiga ko'ra, u AQSh rasmiylaridan o'n yildan ortiq vaqt davomida qochib yurgan.
Prokurorlar Agha ishtirok etgan xakerlik fitnasi Bashar al-Assadga yaqin shaxslar, jumladan Suriyaning Umumiy razvedka direktoratining rahbari tomonidan boshqarilganini aytishadi. Sxema 2011-yil avgust oyida boshlanib, 2024-yil yanvargacha davom etgan.
Adliya vazirligi Aghani operatsiyaning markaziy shaxsi deb ta'riflagan. U taxminan 47 ta nishonni buzib kirgan, bu G'arb axborot agentliklari, kompaniyalar, nodavlat tashkilotlar va AQSh hamda ittifoqchi mamlakatlardagi davlat organlarining aralashmasi edi.
Prokurorlar ta'kidlagan buzilishlar orasida 2013-yilda Associated Pressning Twitter akkauntini egallab olish ham bor. Agha uni ishlatib, Prezident Barak Obama Oq uyda sodir bo'lgan ikki portlashda jarohat olgani haqida soxta xabar e'lon qilgan. Soxta post tezkor pasayishga sabab bo'lib, Dow Jones Industrial Average tarkibidagi aksiyalar umumiy qiymatidan 136 milliard dollarni qisqa muddatga yo'qotgan.
Agha shuningdek, Dengiz piyodalari korpusining yollash veb-saytini joylashtirgan kompaniyaga kirish huquqini qo'lga kiritgan va uning trafikini dengiz piyodalarini buyruqlarga bo'ysunmaslikka chaqirgan rasmga yo'naltirgan. Reklama. O'qishni davom ettirish uchun pastga aylantiring.
U ikki marta Oq uyning ijtimoiy tarmoqlardagi ishtirokiga hujum qilgan, Oq uy xodimlarining elektron pochta ma'lumotlarini nishonga olgan. Bir holatda u ularni qo'lga kiritgan, ammo bu kirish huquqidan foydalanib boshqa xodimlarni aldab, akkauntlarni berishga undashga urinish muvaffaqiyatsiz bo'lgan.
Buzilishlar ko'plab jabrlanuvchilarga tozalash va xavfsizlikni yangilash uchun katta xarajatlar keltirgan. Onlayn nashriyotlarga kontent, reklama va tashqi havolalar taqdim etuvchi firma taxminan olti oy davomida kuniga 35 000 dollar yo'qotgan. Global nodavlat tashkilot yangi tarmoq monitoring vositalariga taxminan 250 000 dollar sarflagan, 800 dan ortiq xodimni qayta o'qitgan va xavfsizlikni yangilagan, umumiy yo'qotishlar 480 000 dollarni tashkil etgan.
Agha va uning taxmin qilingan sherigi Firas Dardar birinchi marta 2014-yil iyun oyida jinoiy shikoyat bilan ayblangan. Ish 2016-yil mart oyida ochilgan, o'shanda FQB ikkala erkakni o'zining Kiber eng ko'p qidiriladiganlar ro'yxatiga kiritgan va Aghani hibsga olishga yordam beradigan ma'lumot uchun 100 000 dollargacha mukofot e'lon qilgan.
Katta hay'at juftlikni 2018-yil may oyida ayblagan. Dardar hali ham qo'lga olinmagan.
Aghaning 2025-yil noyabr oyida federal sud zalida paydo bo'lishi birinchi marta Court Watch huquqiy axborot agentligi tomonidan xabar qilingan. Adliya vazirligining e'lonida u qanday va qayerda hibsga olingani tushuntirilmagan.
Bog'liq: Bulletproof Host Virtualine o'z domenini FQB musodarasiga yo'qotdi
Bog'liq: Polymarket savdogarlaridan 2 million dollardan ortiq mablag' yangi ta'minot zanjiri hujumida o'g'irlangan
Bog'liq: Ukrainalik Hive va Nefilim Ransomware sherigi AQShda 70 oy qamoq jazosiga hukm qilindi
Yozgan: Eduard Kovacs
Eduard Kovacs (@EduardKovacs) SecurityWeek'da katta boshqaruvchi muharrir. U jurnalistika sohasida 2011-yilda o'rta maktab IT o'qituvchisi sifatida ishlaganidan so'ng boshlagan. Eduard sanoat informatika bo'yicha bakalavr darajasiga va kompyuter texnikasi elektr muhandisligida qo'llaniladigan magistr darajasiga ega.
A Syrian man tied to the Syrian Electronic Army (SEA) has received a 42-month prison sentence in the US, more than 12 years after he was first charged.
Ahmad Umar Agha, who used the online handle Th3Pr0, was sentenced on Thursday by a federal court in the Eastern District of Virginia. According to the Justice Department, he evaded US authorities for more than a decade.
Prosecutors say the hacking conspiracy Agha took part in was directed by figures close to Bashar al-Assad, among them the head of Syria’s General Intelligence Directorate. The scheme began as early as August 2011 and continued until January 2024.
The DOJ described Agha as a central figure in the operation. He compromised around 47 targets, a mix of Western news outlets, companies, NGOs, and government bodies in the US and allied countries.
Among the intrusions highlighted by prosecutors was the 2013 takeover of the Associated Press’s Twitter account. Agha used it to publish a fabricated report claiming that President Barack Obama had been hurt in two blasts at the White House. The fake post triggered a flash crash that briefly wiped $136 billion off the combined value of the Dow Jones Industrial Average’s component stocks.
Agha also gained access to the company hosting the Marine Corps’ recruiting website and sent its traffic to an image calling on Marines to defy their orders. Advertisement. Scroll to continue reading.
He twice went after the White House’s social media presence by targeting the email credentials of White House employees. In one case he obtained them, but his attempt to use that access to dupe other staffers into handing over the accounts did not work.
The intrusions left many victims with large bills for cleanup and security overhauls. A firm providing online publishers with content, advertising, and outbound links lost around $35,000 per day for about six months. A global NGO spent roughly $250,000 on new network monitoring tools, retrained more than 800 employees, and upgraded its security, with total losses of $480,000.
Agha and his alleged accomplice, Firas Dardar, were first charged by criminal complaint in June 2014. The case was unsealed in March 2016, when the FBI put both men on its Cyber’s Most Wanted list and offered a reward of up to $100,000 for information leading to Agha’s arrest.
A grand jury indicted the pair in May 2018. Dardar has yet to be caught.
Agha’s appearance in a federal courtroom in November 2025 was first reported by legal news outlet Court Watch. The DOJ’s announcement does not explain how or where he was taken into custody.
Related: Bulletproof Host Virtualine Loses Its Domain to FBI Seizure
Related: $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack
Related: Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison
Written By Eduard Kovacs
Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.
More from Eduard Kovacs
$6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor Google Touts Powerful Cybersecurity Capabilities in Gemini 4 Carbon Model BAE Says No Data Extracted in Incident Hitting Bankruptcy Courts Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices Long-Hidden Flaws Patched in EPICS Research Facility Control Software
Latest News
PHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPress In Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data Leak Passkeys Are Better Than Passwords. But They Are Not Enough. Bulletproof Host Virtualine Loses Its Domain to FBI Seizure Fresh WordPress Vulnerability in Attackers’ Crosshairs Drupal Commerce Core Vulnerability Exploited Against Online Stores $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack Max-Severity GitLab Vulnerability Exploited Against Alpine Linux
Trending
Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network
Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day
$6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor
Oracle Health Data Breach Tally Climbs to Nearly 20 Million
Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages
Over 41,000 DHS Employee Records Leaked Online
China-Linked Hackers Exploit PHP2Shell to Root Firewalls
Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August
Daily Briefing Newsletter
Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.
Webinar: Agentic Pentesting for a Stronger CTEM Program
November 4, 2026
Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.
Register
Virtual Event: CISO Forum 2026 Summit
November 10 & 11, 2026
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
Register
People on the Move
Barracuda has appointed Dan Fletcher as CFO.
Artemis Security has appointed Arun Singh as CGO.
General Paul M. Nakasone has joined Armadin’s Board of Directors.
More People On The MoveExpert Insights
Passkeys Are Better Than Passwords. But They Are Not Enough.
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it. (Torsten George)