Last Updated: January 19, 2026
Amir Hossein NIKAEEN RAVARI
Aliases
Amir Hossein NICKAEIN RAVARI; Amir Hosein NIKA'IN
Nationality
Iran
DoB
1992-04-13
Address
Iran
Reg. ID
4480046429, National ID No.
Official reason
From September 2021 through the present, this group primarily gained unauthorized access to victim networks by exploiting Microsoft Exchange and related ProxyShell vulnerabilities, including an incident in October 2021 when they compromised the network of an electric utility company serving a rural area of the United States, and maliciously used Bi...
Other Information
https://home.treasury.gov/news/press-releases/jy0948
Date of listing
2022-09-14
Program information
Authority
US
Program
Executive Order 13694 Blocking the Property of Certain Persons Engaging in Significant Malicious Cyber-Enabled Activities; Executive Order 13757 Taking Additional Steps to Address the National Emergency With Respect to Significant Malicious Cyber-Enabled Activities
Regime
OFAC-horizontal
Target State
Cyber-attacks
Measures
Blocking Property, Suspending Entry
Sanctions Portfolio
• https://ofac.treasury.gov/faqs/topic/1546
Official Information
On December 31, 2015, OFAC issued the Cyber-Related Sanctions Regulations, 31 CFR part 578 (80 FR 81752, December 31, 2015) (the “Regulations”) to implement Executive Order (E.O.) 13694 of April 1, 2015, “Blocking the Property of Certain Persons Engaging in Significant Malicious Cyber-Enabled Activities” (80 FR 18077, April 2, 2015), pursuant to au...
Additional Details
SDN
Program URL
https://www.federalregister.gov/documents/2022/09/06/2022-19138/cyber-related-sanctions-regulations