Biographical details:
Arman Kahzadian is Iranian and lives in Iran. He was born in February 11 1992 in Ilam.
He has been affiliated with the IRGC, MOIS, Mabna Institute, Digital Boys Underground Team, APA Security and Imen Wall Pardaz.
He is known by the following online alias: Skitt3r.
Summary of activities within Iranian Cyber Operations:
Kahzadian is a malicious cyber actor sponsored by Iran’s Ministry of Intelligence and Security. He has participated in hacking and data exfiltration operations against the U.S and its allies to the benefit of the Iranian government. Kahzadian began hacking activity in 2009 and founded the Digital Boys Underground Team with Masshad-based hacker Amir Barati, known online as “Kinglet”. By 2013 Digital Boys had over 1,000 individual attacks and nearly 8,000 mass attacks against servers – hacking archives associated with targets including a subdomain linked to a U.S Army waterways research facility as well as NASA, Microsoft and MIT.
He also joined an APA cybersecurity center in 2012 that worked for MOIS and then moved to private cybersecurity contractor Imen Wall Pardaz, which provides services to government and security agencies including the IRGC. At Imen Wall Pardaz Kahzadian worked with IRGC Intelligence operatives on projects targeting critical infrastructure and government institutions in the United States and Britain, as well as organizations and individuals across the Middle East.
Key Incidents and Attribution:
Since 2012, Kahzadian has worked for private security companies conducting malicious cyber operations against critical infrastructure sectors and news organizations within the U.S. the UK and several countries throughout the Middle East in support of the Iranian Government, including the IRGC.
Around 2017, Kahzadian started working for the Mabna Institute.
Kahzadian has also worked alongside Mesri on cryptocurrency hacking projects, using information obtained from penetrated systems to identify cryptocurrency addresses and digital wallets.
International Recognition & Legal Actions
US Criminal Indictments and Arrest Warrants:
Kahzadian was arrested in 2011 by the Intelligence Ministry along with Barati, Masoud Molavi and one other individual.
An amended Iranian indictment issued three years later accused them of assembly and collusion against national security through hacking websites belonging to government institutions, revolutionary bodies and banks. He was allegedly released after agreeing to cooperate with the Intelligence Ministry.
Between 2013-2019 Kahzadian was convicted at least four times of hacking and online fraud offenses, receiving prison sentences of over 3 and a half years and fines. There is no record of the prison sentences being enforced.
In 2020, Kahzadian was indicted by the U.S Department of Justice for his role in Mabna Institutes malicious operations.
On the 18 August 2026, the U.S Department of Justice “Rewards for Justice” program announced that it is offering a reward of up to $10 million for information leading to the identification or location of any person who, while acing at the direction or under the control of a foreign government, participates in malicious cyber activities against U.S critical infrastructure in violation of the Computer Fraud and Abuse Act.
The U.S Department of Justice unveiled the 14-count superseding (S2) indictment charging 17 members of the Mabna Institute, including Kahzadian. The superseding indictment alleged that, at the behest of entities including the IRGC, these defendants hacked into universities and other research institutions worldwide, including the United States, stealing at least 31 terabytes of information and intellectual property of untold value.
Sanctions and Designations: The U.S Treasury released a press release on the 24 August 2026 announcing a fresh wave of sanctions against more than 60 officials, entities, and networks linked to Iran’s military, cyber, and oil trading activities. These sanctions included Kahzadian and other members of the Mabna Institute.
