Syrian Electronic Army hacker sentenced to 42 months in the US

Ahmad Umar Agha, a Syrian man tied to the Syrian Electronic Army (SEA) who used the handle Th3Pr0, was sentenced to 42 months in prison by a federal court in the Eastern District of Virginia, SecurityWeek reported on 31 October 2026. According to the Justice Department, he evaded US authorities for more than a decade.

Prosecutors say the hacking conspiracy was directed by figures close to Bashar al-Assad, among them the head of Syria's General Intelligence Directorate, and ran from as early as August 2011 to January 2024. Agha compromised around 47 targets, including Western media outlets, companies, NGOs and government bodies in the US and allied countries. In 2013 he took over the Associated Press's Twitter account to post a fake report that President Barack Obama had been hurt in blasts at the White House, triggering a flash crash that briefly wiped $136 billion off Dow Jones Industrial Average stocks.

Agha and his alleged accomplice, Firas Dardar, were first charged in June 2014. The case was unsealed in March 2016, when the FBI put both men on its Cyber's Most Wanted list, and a grand jury indicted them in May 2018. Dardar has not been caught.

Why it matters State-directed hacking can still bring prison terms years later. The case also recalls that one hijacked media account can move markets, which makes the security of communications accounts a financial question, not only a reputational one.