U.S. Bounty Up to $10 Million for Iranian IRGC Cyber Leader Tied to Infrastructure Hacks

The U.S. Department of State announced on Tuesday that it will pay up to $10 million for information that leads to the identification or location of Amir Yaryab, a senior operative in Iran’s Islamic Revolutionary Guard Corps Cyber‑Electronic Command (IRGC‑CEC). The reward is part of the Rewards for Justice program, which targets individuals involved in attacks against U.S. interests.

Yaryab is believed to have overseen a series of cyber operations that targeted critical infrastructure in the United States and allied nations, including attempts to disrupt energy grids, water treatment facilities, and transportation networks. While the exact scope of his involvement remains classified, U.S. officials have linked him to multiple intrusion campaigns that leveraged ransomware and wiper malware to cripple essential services.

The announcement comes amid heightened tension between Washington and Tehran over a wave of state‑sponsored cyber activity that has intensified since the start of the year. Earlier this spring, several U.S. utilities reported unexplained outages that investigators later attributed to malicious code traced back to Iranian hacking groups. The IRGC‑CEC, a military branch that combines traditional combat roles with advanced cyber capabilities, has been singled out as a primary conduit for Tehran’s offensive digital operations.

Rewards for Justice, established after the September 2001 attacks, has historically focused on terrorism financing and physical threats. Expanding the program to include cyber actors reflects a broader strategic shift, acknowledging that digital attacks can cause damage comparable to kinetic strikes. By offering a sizable bounty, the United States hopes to encourage insiders, competitors, or other sources with knowledge of Yaryab’s whereabouts to come forward.

Experts caution that the effectiveness of such rewards depends on the ability to penetrate tightly controlled networks within Iran’s security apparatus. “Iranian cyber units operate under layers of secrecy, and their personnel are often shielded by multiple aliases,” said a senior analyst at a cybersecurity research firm. “Nevertheless, the financial incentive may create fissures, especially among those who feel the personal cost of international sanctions and isolation.”

If the United States receives actionable intelligence, it could lead to Yaryab’s arrest, extradition, or targeted sanctions that further restrict his operational capacity. The move also signals to allied nations that Washington is prepared to use both diplomatic and financial tools to counter hostile cyber activity.

The bounty underscores an evolving battlefield where code can disrupt power plants as readily as missiles. As governments worldwide grapple with the growing threat of state‑backed hacking, the U.S. decision to place a multimillion‑dollar price tag on a cyber commander may set a precedent for how nations pursue accountability in the digital age.