The U.S. government has announced a reward of up to $10 million for information leading to the identification or location of any individual acting under the direction or control of a foreign government who participates in malicious cyber activities targeting U.S. critical infrastructure, in violation of the Computer Fraud and Abuse Act.
According to the statement, U.S. efforts are particularly focused on the “Shahid Shushtari” organization, a malicious cyber entity operating within the Islamic Revolutionary Guard Corps Cyber-Electronic Command (IRGC-CEC).
This organization has previously operated under several names, including:
• Aria Sepehr Ayandehsazan (ASA)
• Ayandeh Sazan Sepehr Arya (ASSA)
• Emennet Pasargad (Emennet)
• Eeleyanet Gostar
• Net Peygard Samavat Company
These aliases are associated with a series of cyber operations attributed to the IRGC that target U.S. institutions and individuals through hacking attempts, data theft, and disruption activities.
The reward offer is part of ongoing U.S. efforts to strengthen cybersecurity and pursue foreign actors engaged in activities that threaten national security and the functioning of critical infrastructure sectors such as energy, water, communications, and transportation.
U.S. authorities emphasized that the Rewards for Justice program seeks to encourage individuals worldwide to come forward with reliable information that could help disrupt cyberattacks and hold perpetrators accountable.
They also noted that information can be submitted confidentially through designated secure channels.