A Syrian hacker associated with the Syrian Electronic Army (SEA) has been sentenced to 42 months in prison in the United States after evading authorities for over a decade. Ahmad Umar Agha, known online as Th3Pr0, was sentenced by a federal court in the Eastern District of Virginia, marking a significant development in a case that began with charges filed against him in 2014.
The U.S. Department of Justice (DOJ) stated that Agha played a central role in a hacking conspiracy that targeted various entities, including Western news organizations, NGOs, and government bodies, under the direction of individuals linked to the regime of Bashar al-Assad. The hacking activities reportedly commenced in August 2011 and continued until January 2024.
Notable Intrusions and Impact
Among the most notorious incidents attributed to Agha was the 2013 breach of the Associated Press’s Twitter account, where he disseminated a false report claiming that President Barack Obama had been injured in explosions at the White House. This misinformation led to a brief but significant drop in the stock market, erasing approximately $136 billion from the value of the Dow Jones Industrial Average.
Agha’s hacking spree also included compromising the Marine Corps’ recruiting website, redirecting its traffic to an image that urged Marines to disobey orders. His attempts to infiltrate the White House’s social media accounts involved targeting the email credentials of White House employees, although not all efforts were successful.
Financial Consequences for Victims
The repercussions of Agha’s actions were substantial, with victims incurring significant costs for recovery and security enhancements. One online publishing firm reported losses of around $35,000 per day for six months due to the fallout from the attacks. A global NGO faced total losses of approximately $480,000, which included $250,000 spent on new network monitoring tools and extensive employee retraining.
Agha and his alleged accomplice, Firas Dardar, were initially charged in June 2014, with the case being unsealed in March 2016 when both men were placed on the FBI’s Cyber’s Most Wanted list. A grand jury indicted them in May 2018, but Dardar remains at large.
Arrest and Sentencing Details
Agha’s recent court appearance in November 2025 was first reported by legal news outlet Court Watch. However, the DOJ has not disclosed the specifics of how or where he was apprehended. His sentencing represents a culmination of years of evasion and legal proceedings, highlighting the ongoing efforts of U.S. authorities to address cybercrime linked to state-sponsored actors.
For further details, see the report from SecurityWeek.
