U.S. offers $10M reward for Iranian cyber operatives linked to IRGC's Shahid Shushtari unit

The U.S. government has announced a $10 million reward for information on Mohammad Bagher Shirinkar and Fatemeh Sedighian Kashi through the Rewards for Justice program. According to the announcement backed by the FBI, Department of Justice, and State Department, the individuals are accused of planning and conducting cyberattacks on behalf of the Iranian government, with alleged ties to the Islamic Revolutionary Guard Corps (IRGC). Google Threat Intelligence has associated Shirinkar with the Shahid Shushtari unit, which operates under Iran's Cyber Electronic Command - a military unit known for offensive cyber operations. While the announcement does not specify particular cyber campaigns or technical details of their activities, this development highlights the ongoing cyber threat from nation-state actors. The substantial reward indicates the high priority placed on countering Iranian cyber capabilities and disrupting their operational capacity. For cybersecurity professionals, this serves as a reminder of the persistent threat from state-sponsored actors and the importance of maintaining robust defenses against advanced persistent threats (APTs). The collaboration between U.S. law enforcement and private sector threat intelligence demonstrates the critical role of public-private partnerships in countering cyber threats. Iranian cyber operations have historically targeted government agencies, critical infrastructure, and private sector organizations, making this development particularly relevant for security teams across these sectors.