Syrian Electronic Army hacker sentenced to 42 months over attacks on Western targets

A prominent hacker with the pro-Assad Syrian Electronic Army (SEA) has been sentenced to 42 months in U.S. federal prison for a long campaign of intrusions against Western targets, according to The Record, which cited a U.S. Justice Department (DOJ) announcement.

What happened

The Record reports that Ahmad Umar Agha, known online as "Th3Pr0," was sentenced in federal court in Virginia, with the DOJ announcing the outcome the same week as the October 30, 2026 report. The article does not mention a fine or restitution. According to the report, the SEA carried out computer intrusions since at least 2011 in support of Syrian leader Bashar al-Assad and collected intelligence for his government before it fell in 2024.

The AP Twitter hoax

The group's best-known operation, described by The Record, was the 2013 hijack of the Associated Press's Twitter account, through which it posted a false report of an explosion at the White House that injured President Barack Obama. The article says the hoax caused a brief "$136 billion dip" in the stock market. A 2014 FBI affidavit cited in the report said Twitter's password-reset confirmation for the AP account was sent to an email address used by Agha. The report also says Agha gained access to a company hosting the Marine Corps recruiting website and redirected visitors to propaganda urging service members to disobey orders.

The case against Agha

According to The Record, the DOJ says Agha hacked about 47 Western media outlets, nonprofits, and other U.S.-allied entities. John Eisenberg, the assistant attorney general for national security, said Agha used his hacking skills to serve Assad's regime, including efforts to "silence reporting on the regime's atrocities." The report traces a long legal timeline: the U.S. first charged Agha in 2014, the FBI added him and co-defendant Firas Dardar to its Cyber's Most Wanted list in 2016 with a $100,000 reward, a federal grand jury indicted both men in 2018, and Agha was taken into U.S. custody in 2025. The DOJ has not released details of the arrest, and the report does not mention extradition.

Why it matters

The sentencing closes a chapter on one of the most visible hacktivist operations of the past decade and shows that state-aligned online campaigns can carry personal legal consequences years later, even after the sponsoring government has collapsed. The Record notes that Dardar, Agha's co-defendant, remains a fugitive.