FBI

The Federal Bureau of Investigation is the United States' principal agency for domestic intelligence, counterterrorism, and federal criminal investigations. It operates field offices across every US state and in selected overseas postings, and its Cyber Division leads major ransomware takedowns, attribution actions, and joint advisories with CISA, NCSC, and allied national agencies. The FBI Internet Crime Complaint Center (IC3) issues public-facing threat alerts; its legal attaches embed with foreign partners including Europol and the UK National Crime Agency to coordinate cross-border enforcement.

An FBI official told CyberTalks 2026 in February that Salt Typhoon's compromise of telecoms infrastructure was "still very, very much ongoing," confirming at least 200 companies across 80 countries affected as of August 2025. The FBI co-issued attribution-backed advisory PSA260407 with NCSC and partnered with Michigan State Police and German Federal Criminal Police to seize Cryptocurrency exchange E-Note, charging Russian national Mykhalio Petrovich Chudnovets with laundering more than $70m in ransomware proceeds. The FBI's cyber obligations face a proposed $560m cut under the Trump FY27 budget, affecting roughly 1,900 staff across cyber and adjacent portfolios.

On 29 May 2026 the FBI's Los Angeles Field Office co-ordinated the "Economic Fury" action with OFAC and the Commerce Department, targeting an Iranian MODAFL/SAIRAN defence-electronics procurement ring that impersonated US small businesses to defraud American IT vendors into shipping spectrum analysers and non-linear junction detectors. Rome-based Saeid Zahedi used a US financial account for domain registration, converting the administrative sanctions case into a prosecutable federal wire-fraud offence. Eight individuals and five companies were designated under EO 13224; the State Department simultaneously posted a $15 million Rewards for Justice bounty on IRGC financial networks.