Dual Iranian-Turkish Hacker Arrested in Montenegro for Attacks on U.S.

In a joint security operation between Montenegro judicial authorities and the FBI, an internationally wanted individual named Amir Barati was arrested in the coastal city of Kotor [1]. This 39-year-old citizen, who holds both Iranian and Turkish passports, is accused of being a key figure in cyberattacks against U.S. institutions since 2013.

Details of the Operation in Kotor Montenegro police announced late Thursday that the suspect was detained following a formal request from a court in New York [2]. Barati is charged with multiple crimes, including conspiracy to commit computer fraud, hacking sensitive systems, and identity theft. The operation took place as Montenegro, a NATO ally, has increased its security cooperation with Washington in combating cross-border cybercrime [3].

Dimensions of the $3.4 Billion Damage According to the official police statement, this dual-national hacker is accused of targeting more than 150 universities in the United States and causing damages totaling $3.4 billion (approximately €2.98 billion) to the country's infrastructure [4]. His methods included infiltrating university user accounts and stealing scientific research and sensitive data. U.S. authorities believe this volume of damage represents one of the largest academic data theft cases in the country's history [1].

Connection to the IRGC and Extradition Process One sensitive aspect of this case is the claim by security officials that stolen data was transferred to Iranian military and government entities. It is alleged that the information obtained by this individual was placed at the disposal of the Islamic Revolutionary Guard Corps (IRGC) and certain universities within Iran [3]. Currently, Amir Barati's case has been referred to the High Court in Podgorica, the capital of Montenegro, to decide on the request for his extradition to the United States [2].

Background of Cyber Tensions This arrest occurs at a time when security warnings regarding cyber activities attributed to Iran have increased. Previously, in April 2026, U.S. intelligence agencies warned of escalating attacks against critical infrastructure [5]. While it remains unclear if this arrest is linked to previous cases of Iranian hackers in 2018, Barati's capture is considered a significant blow to cyber influence networks in the Balkan region [4].