The High Court in Podgorica approved Barati’s extradition under a simplified procedure and notified Montenegro’s Justice Ministry, local newspaper Vijesti reported Tuesday.
“The Ministry of Justice has informed the US Department of Justice,” Justice Minister Bojan Božović told the newspaper, adding that the remaining procedures would be carried out with police.
Barati, 39, was arrested on June 25 while visiting the coastal Montenegrin town of Kotor, in an operation involving local police and the FBI. He holds both Iranian and Turkish citizenship.
His extradition brings US authorities closer to putting on trial a man whose hacking career Iran International previously traced from underground cyber groups to alleged work for Iran’s Intelligence Ministry.
US prosecutors last month named Barati among 17 people charged over their alleged work with the Tehran-based Mabna Institute, which the Justice Department says conducted hacking operations for Iranian government entities, including the IRGC.
The Justice Department alleges the group targeted more than 100,000 professors and compromised about 8,000 accounts at 144 US universities and 178 universities abroad between 2013 and 2017. More than 31 terabytes of academic data and intellectual property were stolen, according to prosecutors.
Barati specifically helped track spearphishing campaigns, exchange credentials from compromised accounts, prepare lists of targets, conduct network reconnaissance and craft phishing messages, prosecutors said.
He faces seven counts, including conspiracy to commit computer intrusions and wire fraud, computer fraud, wire fraud and aggravated identity theft. The indictment remains allegations, and Barati is presumed innocent unless convicted.
‘Kinglet’
An Iran International investigation published after his arrest traced Barati’s hacking career much further back.
Born in Mashhad in 1986, Barati founded the Iran Black Hats Team in his early twenties and later co-founded Digital Boys Underground Team, operating online under the alias “Kinglet.”
Archived records reviewed by Iran International linked the groups to hundreds of attacks on academic, commercial and government websites, including systems associated with NASA, Microsoft, MIT and the US military.
His relationship with Iran’s security establishment appears to have shifted after his arrest by the Intelligence Ministry in 2010.
Multiple sources familiar with his activities told Iran International that authorities subsequently recruited Barati rather than pursuing him, turning him into an intelligence asset.
Court records reviewed by Iran International showed that a one-year prison sentence against him was never enforced despite reaching the enforcement stage. Iran International could not independently verify claims that the Intelligence Ministry intervened to protect him.
Barati left Iran for Turkey in 2021. He later obtained Turkish citizenship and changed both his first and last names through a Turkish court.
Sources told Iran International he subsequently avoided travelling to Europe until June, when he was arrested while on holiday in Montenegro despite travelling under his new identity.
The Justice Department’s August indictment later publicly confirmed Barati’s alleged role in the Mabna network for the first time, resolving a question raised after his arrest over how his case was connected to the long-running IRGC-linked university hacking campaign.