American hacker mercenaries face U.S. charges for work in UAE

The three men, Marc Baier, Ryan Adams, and Daniel Gericke, were part of a clandestine unit named Project Raven, that helped the United Arab Emirates spy on its enemies.

Signage is seen at the United States Department of Justice headquarters in Washington, D.C., U.S.

Three former U.S. intelligence operatives, who went to work as mercenary hackers for the United Arab Emirates, face federal charges of conspiring to violate hacking laws, according to Justice Department court documents filed on Tuesday.

(Subscribe to our Today's Cache newsletter for a quick snapshot of top 5 tech stories. Click here to subscribe for free.)

The three men, Marc Baier, Ryan Adams, and Daniel Gericke, were part of a clandestine unit named Project Raven, first reported by Reuters, that helped the United Arab Emirates spy on its enemies.

The defendants are being charged also with military export restriction violations.

"Defendants used illicit, fraudulent, and criminal means, including the use of advanced covert hacking systems that utilised computer exploits obtained from the United States and elsewhere, to gain unauthorised access to protected computers in the United States and elsewhere and to illicitly obtain information," the court document states.

Reuters previously reported that Baier was a program manager for Project Raven. Adams and Gericke were operators within the effort, helping the UAE hack its targets.

Prosecutors wrote in a separate filing that they have promised to drop the charges if the three men cooperate with U.S. authorities, pay a financial penalty, agree to unspecified employment restrictions and acknowledge responsibility for their actions.

Text messages sent to Baier and Adams requesting comment went unanswered. A social media message to Gericke also did not receive an immediate response.

“The Bureau’s dedication to justice is commendable, and I have the utmost respect for the agents assigned to this case," said Lori Stroud, a former NSA analyst who worked on Project Raven and then acted as a whistleblower.

"However, the most significant catalyst to bringing this issue to light was investigative journalism - the timely, technical information reported created the awareness and momentum to ensure justice.”

The court documents describe how the three helped the UAE design, procure and deploy hacking capabilities over multiple years. Their victims allegedly included U.S. citizens, which Reuters previously reported based on information provided by Stroud.

Former program operatives previously told Reuters they believed they were following the law because superiors promised them the U.S. government had approved the work.