Syrian Electronic Army Hacker Sentenced for Cyber Campaigns Against Western Targets
A prominent member of the **Syrian Electronic Army (SEA)**, **Ahmad Umar Agha**, known online as “Th3Pr0,” has been sentenced to 42 months in prison for his role in cyber campaigns targeting nearly 50 Western entities. These attacks, orchestrated in support of former Syrian President Bashar al-Assad's regime, included high-profile incidents like the hijacking of the Associated Press's Twitter account.
A federal court in Virginia has delivered a 42-month prison sentence to **Ahmad Umar Agha**, known by his online alias “Th3Pr0.” Agha was a key operative within the **Syrian Electronic Army (SEA)**, a hacking collective implicated in numerous cyber intrusions aimed at Western targets.
### Orchestrated by Assad's Inner Circle
The **Justice Department** announced that Agha’s activities were part of a broader conspiracy organized by close advisors to former Syrian President **Bashar al-Assad**. The **SEA** has been active since at least 2011, leveraging cyber operations to bolster Assad's government during a protracted civil war that ultimately led to its overthrow in 2024.
### High-Impact Cyber Attacks
Among the **SEA**'s most notable exploits was a 2013 incident where the group claimed responsibility for hijacking the **Associated Press**'s Twitter account. A false tweet, reporting an explosion at the White House and injuries to President **Barack Obama**, caused a brief but significant $136 billion dip in the stock market.
An **FBI** affidavit from 2014 linked Agha to this incident, noting that a password reset message for the compromised Twitter account was sent to an email address used by him.
Another significant attack involved Agha gaining unauthorized access to a company hosting the **Marine Corps**’ recruiting website. He then redirected visitors to a propaganda message, urging U.S. service members to disobey orders and join the Syrian Army.
### Pursuit and Capture
Agha's criminal activities first drew U.S. charges in 2014. By 2016, the **FBI** added him and fellow **SEA** member **Firas Dardar** to its Cyber's Most Wanted list, offering a $100,000 reward for information leading to their capture. Both individuals were indicted by a federal grand jury in 2018.
Agha was taken into U.S. custody last year, though the **DOJ** has not disclosed details of his arrest. **Firas Dardar** remains at large.
### Intelligence Gathering and Disinformation
In total, Agha is credited with hacking approximately 47 Western media outlets, non-profit organizations, and other entities allied with the U.S. The **DOJ** also stated that the group’s digital conspiracy played a role in collecting intelligence for Assad’s government prior to its downfall.
**John Eisenberg**, Assistant Attorney General for National Security, commented on the sentencing: "Agha deployed his hacking skills in the service of Assad's regime to silence reporting on the regime's atrocities, intimidate its opponents, and incite U.S. servicemembers to refuse their orders."
