Feds Nab Iranian In Montenegro Over Alleged $3.4BN Cyberattack Campaign Targeting US Institutions

In the years leading up to President Trump coming into office and ordering Operation Epic Fury targeting the Islamic Republic for regime change, which failed to accomplish this (early-stated) goal, Iran had frequently been accused of orchestrating major cyberespionage campaigns targeting the United States and its allies.

But rarely was any individual or group apprehended for such alleged cyberattacks, much less was definitive proof uncovered of backing from the Iranian government. But on Friday there has been a reported capture of an Iranian suspected cyber-attacker, said to be behind dozens of significant sabotage attacks on American institutions, mainly of higher learning.

A high-profile international manhunt ended in the coastal town of Kotor on Thursday, as Montenegrin police, reportedly acting on an FBI tip-off, arrested an Iranian-Turkish dual national accused of masterminding a catastrophic, decade-long cyberwar against US infrastructure.

The 39-year-old suspect, identified by authorities only as "A.B.", is wanted by the United States for allegedly orchestrating cyberattacks that inflicted a staggering $3.4 billion in damages.

The suspect is facing a laundry list of charges from a New York court - among them computer fraud, hacking, identity theft, organized crime.

Authorities allege that from 2013 onwards he carried out "massive hacking attacks" systematically targeting American intellectual property. Astoundingly this included more than 150 US universities, which saw their networks infiltrated and proprietary data plundered.

The actions apparently weren't just for profit, as investigators allege the stolen data and compromised university accounts were weaponized "for the benefit of Iran's Islamic Revolutionary Guard Corps and other Iranian beneficiaries, including universities."

However, it's as yet unclear what evidence exists for this, or the degree to which authorities have found ties to state entities or intelligence - but one can imagine that operations of this scale might likely have had state backing.

The suspect is currently being held ahead of an appearance before a court in the Montenegrin capital, Podgorica, which will ultimately rule on the US extradition request - something which will likely be granted, given the FBI assist to local investigators.

Back in 2018, the Department of Justice unsealed a sweeping indictment that accused nine Iranian nationals of hacking universities and other organizations to steal academic research and data.

🇲🇪🇮🇷🇺🇸 An accused IRGC hacker who targeted 150+ American universities just got arrested, at a beach resort in Montenegro.

The numbers are staggering: $3.4 billion in damage. Stolen credentials allegedly funneled straight to Iran's Revolutionary Guard.

Montenegro police picked… pic.twitter.com/koflMD3q5Q

— Mario Nawfal (@MarioNawfal) June 26, 2026

So far, US authorities have not specifically indicated whether the latest arrest is connected to that prior case, leaving open the question of whether "A.B." was a lone operator or part of a much larger state-backed or intelligence-linked apparatus.