NewsPublished 31 Oct 2026

Syrian Hacker Gets Prison Time in US After Over a Decade on the Run

Source SecurityWeek

Description

Ahmad Umar Agha, a Syrian hacker affiliated with the Syrian Electronic Army, was sentenced to 42 months in a US federal court for a hacking conspiracy directed by Syrian intelligence figures. Over more than a decade, he compromised around 47 targets including Western media, companies, NGOs, and government entities, causing significant disruption and financial losses. Notable incidents include the 2013 hijacking of the Associated Press Twitter account that triggered a stock market flash crash and attacks on the Marine Corps recruiting website and White House social media accounts.

Impact

The attacks caused significant operational disruption and financial damage to multiple victims, including media outlets, government entities, NGOs, and private companies. The 2013 Associated Press Twitter hack triggered a flash crash wiping $136 billion off stock values temporarily. Victims incurred large cleanup and security costs, such as a firm losing approximately $35,000 daily for six months and a global NGO spending $480,000 on network monitoring, retraining, and security upgrades. The attacks also undermined trust in targeted organizations' digital communications and required extensive incident response efforts.

Defensive guidance

This is a closed law enforcement case with the perpetrator sentenced. No direct technical mitigation applies to this historical threat. Organizations should continue to maintain robust security controls to defend against similar nation-state or politically motivated cyber intrusions.

Summary

Ahmad Umar Agha, known as Th3Pr0, was a central figure in a hacking conspiracy linked to the Syrian Electronic Army and directed by Syrian intelligence officials close to Bashar al-Assad. From August 2011 to January 2024, he compromised approximately 47 targets across media, businesses, NGOs, and government bodies in the US and allied countries. His attacks included the 2013 Associated Press Twitter account takeover, which falsely reported an attack on President Obama and caused a brief $136 billion stock market loss. He also targeted the Marine Corps recruiting website and attempted to exploit White House employee email credentials. The intrusions resulted in substantial remediation costs for victims, including hundreds of thousands of dollars spent on security upgrades and employee retraining. Agha evaded capture for over a decade before his 2025 arrest and subsequent sentencing.

References

securityweek.com/syrian-hacker-gets-prison-time-in-us-after-over-a-decade-on-the-run/ (opens in a new tab)

Community reviews

Loading reviews…

Description

AI analysisMachine-generated, updated 31 Oct 2026, 11:05 UTC

Technical details

References

Community reviews