Montenegrin police, in cooperation with the U.S. Federal Bureau of Investigation (FBI), have arrested an Iranian national wanted by U.S. authorities for alleged large-scale hacking attacks. The 39-year-old man, who holds dual Iranian and Turkish citizenship, is accused of orchestrating cyberattacks that targeted more than 150 universities in the United States, causing an estimated $3.4 billion in damages.
The arrest took place in the Adriatic coastal resort of Kotor, according to a statement from Montenegro's police directorate. The suspect is sought by the Southern District Court in New York on charges including conspiracy to commit computer fraud, hacking, and identity theft.
The acquired data and access to compromised university accounts were allegedly used for the benefit of the Islamic Revolutionary Guard Corps (IRGC) and other Iranian entities. The IRGC and Iran have a documented history of state-sponsored cyber operations targeting the U.S., often linked to the IRGC.
This development follows an April warning from U.S. cybersecurity, law enforcement, and intelligence agencies about an escalation of Iranian hacking campaigns targeting critical U.S. infrastructure.
The case will now proceed to a High Court judge in Podgorica, Montenegro's capital, for extradition proceedings. The FBI had no immediate comment.