Syrian Hacker Receives 42-Month Sentence for Decade-Long Cyber Campaign Linked to Assad Regime
Ahmad Umar Agha, known as 'Th3Pr0', was sentenced to nearly four years in prison after a hacking spree that began in 2011 and involved hijacking the Associated Press's Twitter account.
Ahmad Umar Agha, a Syrian hacker known by the moniker 'Th3Pr0', has been handed a 42-month prison sentence in the United States following a decade-long cyber campaign that reportedly involved figures closely linked to Syrian President Bashar al-Assad. 12
The hacking conspiracy, which spanned from August 2011 to January 2024, saw Agha and his accomplices target Western media outlets, non-profits, and other entities aligned with the U.S., according to reports. 12 Among their most notable feats was commandeering the Associated Press's Twitter account in 2013, an act that triggered a brief market panic, causing a flash crash that wiped $136 billion off the combined value of the Dow Jones Industrial Average’s component stocks. 1
Agha, who was first charged over a dozen years ago, also managed to redirect traffic from the Marine Corps' recruiting website to an image that encouraged Marines to disobey orders. Additionally, he made two attempts to seize control of the White House's social media accounts, succeeding in one instance. 1
Victims of these cyberattacks faced substantial financial repercussions, with one firm suffering a loss of $35,000 per day for half a year. Another organization, a global NGO, had to spend $250,000 on new network monitoring tools and upgrade its security, resulting in total losses of $480,000. 1
In June 2014, Agha and fellow Syrian Electronic Army member Firas Dardar were added to the FBI's Cyber's Most Wanted list. However, while Agha was eventually apprehended and brought into U.S. custody last year, Dardar remains at large. 12
The Syrian Electronic Army, under the direction of Assad's close advisors, used these cyber operations not just for disruption but also to gather intelligence for the Syrian government. 2
What We Know
- - Agha received a 42-month prison sentence in the US. 1
- - He was first charged more than 12 years ago. 1
- - The hacking scheme lasted from August 2011 to January 2024. 1
- - It involved taking over the Associated Press's Twitter account in 2013. 12
- - The AP takeover caused a flash crash wiping $136 billion off the Dow Jones Industrial Average’s component stocks. 1
- - Agha targeted the Marine Corps' recruiting website and the White House's social media accounts. 1
- - Victims incurred significant costs for cleanup and security improvements. 1
- - Agha and Dardar were added to the FBI's Cyber's Most Wanted list in 2014. 2
- - Agha was part of a conspiracy organized by close advisers of former Syrian President Bashar al-Assad. 2
Verification report
Likely accurate — probability of truth 70%, weighted across 20 claims from 2 independent outlets.
- confirmed The hacking conspiracy Agha was involved in was directed by figures close to Syrian president Bashar al-Assad. (85%)
- confirmed One of the intrusions involved taking over the Associated Press's Twitter account in 2013. (85%)
- likely Ahmad Umar Agha received a 42-month prison sentence in the US. (71%)
- likely Agha was first charged more than 12 years ago. (71%)
- likely The hacking scheme started in August 2011 and ended in January 2024. (71%)
- likely This Twitter takeover caused a flash crash that wiped $136 billion off the combined value of the Dow Jones Industrial Average’s component stocks. (71%)
- likely Agha also targeted the Marine Corps' recruiting website and redirected traffic to an image encouraging Marines to disobey orders. (71%)
- likely He attempted to gain access to the White House's social media accounts twice but only succeeded once. (71%)
- likely Victims incurred significant costs for cleanup and security improvements, with one firm losing $35,000 daily for six months. (71%)
- likely A global NGO spent $250,000 on new network monitoring tools and upgraded its security, with total losses of $480,000. (71%)
- likely Agha and his accomplice Firas Dardar were first charged in June 2014 and indicted in May 2018. (71%)
- likely Dardar remains at large. (71%)
- likely Ahmad Umar Agha, known as 'Th3Pr0', received a sentence of more than three years in prison. (71%)
- likely Agha was part of a conspiracy organized by close advisers of former Syrian President Bashar al-Assad. (71%)
- likely In 2014, Agha and another member of the Syrian Electronic Army were added to the FBI's Cyber's Most Wanted list. (71%)
- likely Agha was arrested and brought into U.S. custody in the previous year. (71%)
- likely The Syrian Electronic Army's actions included collecting intelligence for Assad's government. (71%)
- likely Agha's hacking targeted Western media outlets, non-profits, and other entities aligned with the U.S. (71%)
- unverified Agha compromised approximately 47 targets including Western news outlets, companies, NGOs, and government bodies. (50%)
- unverified The Syrian Electronic Army conducted cyberattacks on approximately 50 Western targets. (50%)
Sources
- SecurityWeek — Syrian Hacker Gets Prison Time in US After Over a Decade on the Run
https://www.securityweek.com/syrian-hacker-gets-prison-time-in-us-after-over-a-decade-on-the-run/ - The Record — Syrian Electronic Army hacker gets prison time for attacks on Western targets
https://therecord.media/syrian-electronic-army-hacker-sentenced-three-years