Cybersecurity · VIDEO
42 months in prison for Syrian Electronic Army hacker: the key role in attacks on media and institutions
A member of the Syrian Electronic Army has been sentenced to 42 months in prison in the USA for cyberattacks against media outlets, institutions, and companies. The intrusions caused significant economic losses and financial disasters such as the 2013 flash crash.
KEY TAKEAWAYS
- 42-month sentence for Ahmad Umar Agha, hacker linked to the Syrian Electronic Army
- Attacks on media, Marine Corps, and White House with economic losses amounting to millions of dollars
- 2013 flash crash caused by a fake tweet about Obama: -$136 billion in a few minutes
- Victims including AP, Marine Corps, and a company that lost $35,000 per day for six months
- Decade-long escape and final capture: Agha was wanted by the FBI with a $100,000 bounty
Transcript
Ahmad Umar Agha, also known as Th3Pr0, has been sentenced to 42 months in prison for his role in cyberattacks linked to the Syrian Electronic Army. The sentence, handed down by a federal court in Virginia, concludes a case that began in 2011. Agha, operating under the direction of high-ranking Syrian regime officials, targeted 47 entities including media outlets, companies, NGOs, and government institutions.
Among his most notable attacks was the takeover of the Associated Press' Twitter account in 2013. Agha posted a false statement about President Obama, causing a $136 billion flash crash in financial markets. Other targets included the Marine Corps recruitment site, which was redirected to propaganda imagery.
The intrusions caused significant economic damage. A digital services company lost $35,000 per day for six months, while a global NGO incurred expenses of $480,000 for security updates and monitoring tools.
Agha and his alleged accomplice, Firas Dardar, were initially indicted in 2014. Despite an FBI manhunt, Dardar remains at large. Agha's arrest, which occurred under unclear circumstances, was only made public in November 2023.
This case underscores the importance of robust cyber risk policies and structured breach remediation plans. It also highlights the need for compliance with regulations such as the NIS2 directive and the DORA regulation, which require measures for digital operational resilience.
The conviction marks a turning point in the fight against state-sponsored cyber threats, but the ongoing fugitive status of Firas Dardar shows that the challenge is far from over. Organizations are advised to invest in regular penetration tests, vulnerability assessments, and cyber intelligence to mitigate similar intrusions.
