Biographical details:
Amir Yaryab is Iranian.
Summary of activities within Iranian Cyber Operations:
Yaryab is the Head of Cyber Operations Command for the Islamic Revolutionary Guard Corps. In this role he directs malicious cyber groups, such as Shahid Hemmat, Shahid Shushtari and Cyber Av3ngers to target U.S critical infrastructure.
Units such as CyberAv3ngers target critical infrastructure sectors including defense, news, shipping, airlines, energy and financial and telecommuncations systems in the United States, Europe, and the Middle East.
Associated Organization(s):
Aria Sepehr Ayandehsazan (ASA); Ayandeh Sazan Sepehr Arya (ASSA); CyberAv3ngers; Dadeh Afzar Arman (DAA); Eeleyanet Gostar; Emennet Pasargad; Imannet Pasargad; IRGC Jangal Organization; Islamic Revolutionary Guard Corps Cyber-Electronic Command (IRGC-CEC); Islamic Revolutionary Guard Corps Electronic Warfare and Cyber Defense Organization; Mehrsam Andisheh Saz Nik (MASN); Mr. Soul; Net Peygard Samavat Company; Shahid Hemmat; Shahid Shushtari.
Associated Individuals:
Manuchehr Akbari; Seyyed Mehdi Hashemi; Hamid Homayunfal; Amir Hosein Hoseini; Mohammad Hosein Moradi; Sajjad Kashian; Seyyed Mohammad Hosein Musa Kazemi; Hamidreza Lashgarian; Mahdi Lashgarian; Ali Mahdavian; Milad Mansuri; Alireza Shafie Nasab; Mohammad Reza Raf’atinezhad; Mohammad Amin Saberian; Fatemeh Sadeghi; Mohammad Bagher Shirinkar; Elaheh Yazdi.
US Criminal Indictments and Arrest Warrants:
On the 3 September 2026, Rewards for Justice announced it was offering a reward of up to $10 million for information leading to the identification or location of any person who, while acting at the direction or under the control of a foreign government, participates in malicious cyber activities against U.S. critical infrastructure in violation of the Computer Fraud and Abuse Act (CFAA).
Under this reward offer, RFJ is seeking information on Amir Yaryab, a senior official in Iran’s Islamic Revolutionary Guard Corps Cyber-Electronic Command (IRGC-CEC).
According to the RFJ notice, he also directs multiple components of Iran’s IRGC-CEC, including Shahid Hemmat and Shahid Shushtari. These malicious cyber groups have conducted cyber and cyber-enabled information operations targeting critical infrastructure sectors including defense, news, shipping, travel (hotels and airlines), energy, and financial and telecommunications systems in the United States, Europe, and the Middle East.
Yaryab also oversees and controls operations conducted by IRGC-CEC-affiliated groups such as CyberAv3ngers, Dadeh Afzar Arman (DAA), and Mehrsam Andisheh Saz Nik (MASN). These malicious cyber groups have used malware to target civilian infrastructure worldwide.
