Alleged cyber commander of Iran’s Revolutionary Guard named by opposition outlet

Report identifies senior Iranian figures said to be involved in several cyberattacks over past year, days after Albania cut ties with Tehran following major hack

Illustrative: A cybersecurity expert talks about Iran hacking techniques, in Dubai, United Arab Emirates, September 20, 2017. (AP Photo/Kamran Jebreili)
Illustrative: A cybersecurity expert talks about Iran hacking techniques, in Dubai, United Arab Emirates, September 20, 2017. (AP Photo/Kamran Jebreili)

An Iranian opposition outlet on Sunday named the Islamic Revolutionary Guard Corps commander and other officials allegedly behind several cyberattacks over the past year, including the recent hack on Albania that led Tirana to sever diplomatic ties with Tehran.

According to the Saudi-sponsored Iran International, the IRGC’s top cyber commander is Hamid Reza Lashgarian, an assistant professor at Imam Hossein University in Tehran.

Lashgarian was named in a Sky News report last July as head of Intelligence Group 13, a sub-group in an offensive cyber unit that tracked Western targets.

The report said Lashgarian, 61, was born in Tehran and identified the street where he lives. Lashgarian’s wife, Fatima Zahra Farrokh, was also named in the report, but no details were given on her alleged role in the hacking.

The other alleged senior Iranian hackers named in the report were brothers Mohammad Hossein Shirinkar and Mohammad Bagher Shirinkar, as well as their son-in-law Seyyed Mehdi Hashemi Toghroljerdi.

The latter two were sanctioned by the US last year for allegedly threatening American voters ahead of the 2020 presidential election.

Mohammad Bagher Shirinkar, who also goes by Mojtaba Tehran, was separately sanctioned in 2019 for providing “technical support” to the IRGC’s cyber unit.

Iran International did not specify the involvement of Shirinkar’s brother, but described him as a key figure in the group, while Toghroljerdi was said to be the head of an Iranian company alleged used to carry out cyberattacks.

The report came a day after NATO-member Albania accused Iran of launching a fresh cyberattack, following the major attack in July. Tehran has rejected the accusations and called Albania’s decision to cut relations and expel Iranian diplomats “an ill-considered and short-sighted action.”

A report by Microsoft last week said the targeting of Albania was likely “retaliation for cyberattacks Iran perceives were carried out by Israel and the Mujahedeen-e-Khalq (MEK),” an Iranian opposition group that regularly hosts summits in Tehran.

On Friday, the US announced sanctions on Iran’s Ministry of Intelligence and Security and its minister Esmail Khatib over Tehran’s alleged involvement in attacks against the US and its allies.

The Islamic Republic has also itself been targeted by cyberattacks, most notably in 2010 when the Stuxnet virus — believed to have been engineered by Israel and the US — infected its nuclear program.

Agencies contributed to this report.

Most Popular
read more:
If you’d like to comment, join
The Times of Israel Community.
Join The Times of Israel Community
Commenting is available for paying members of The Times of Israel Community only. Please join our Community to comment and enjoy other Community benefits.
Please use the following structure: example@domain.com
Confirm Mail
Thank you! Now check your email
You are now a member of The Times of Israel Community! We sent you an email with a login link to . Once you're set up, you can start enjoying Community benefits and commenting.