The Justice Department also accused Monica Elfriede Witt, 39, of betraying former colleagues in the U.S. intelligence community by feeding details about their personal and professional lives to Iran. Four hackers linked to the Iranian government, charged in the same indictment, used that information to target the intelligence workers online, prosecutors said.
Witt had been on the FBI's radar at least a year before she defected after she attended an Iranian conference and appeared in anti-American videos. She was warned about her activities, but reassured agents that she would not provide sensitive information about her work if she returned to Iran, prosecutors say. She was not arrested at the time.
"Once a holder of a top secret security clearance, Monica Witt actively sought opportunities to undermine the United States and support the government of Iran — a country which poses a serious threat to our national security," said FBI executive assistant director Jay Tabb, the bureau's top national security official.
Tabb said "she provided information that could cause serious damage to national security," though he did not provide specifics.
Witt remains at large in Iran, as do the four hackers, who prosecutors say were acting on behalf of the government-linked Islamic Revolutionary Guard Corps. That group, a branch of Iran's armed forces, has been designated by the U.S. government as terrorism supporter.
The indictment was unsealed the same week as Iran celebrated the 40th anniversary of its Islamic Revolution and as the country denounced a Middle East security conference co-hosted by the U.S. and Poland. Officials said the indictment's timing was unconnected to the meeting.
Witt, a Texas native, served in the Air Force between 1997 and 2008, where she was trained in the Farsi language and was deployed overseas on classified counterintelligence missions, including to the Middle East. She then found work as a Defense Department contractor.
She defected to Iran in 2013 after being invited to two all-expense-paid conferences in the country that the Justice Department says promoted anti-Western propaganda and condemned American moral standards. She was a Defense Department contractor at the time.
The Treasury Department on Wednesday sanctioned the New Horizon Organization, which sponsored the conferences Witt attended and hosts events that American officials say promote Holocaust denial, conspiracy theories and serve as a platform for Iranian intelligence recruitment.
Witt first traveled to a "Hollywoodism" conference in 2012, when she appeared in Iranian television videos in which she identified herself as a former U.S. service member with hostile views toward America. She was warned by FBI agents that she was a potential recruitment target.
"She chose not to heed our warning that travel to Iran could potentially make her susceptible to recruitment," Tabb said. "She continued to travel."
She attended the same conference the following year and was hired by an unnamed individual who professed ties to high-level Iranian officials to help in the filming of an anti-American propaganda commercial.
Given free housing and computer equipment, she went to work for the Iranians, supplying information about a classified Defense Department program and assembling into "target packages" research she conducted into the family lives, locations and missions of former colleagues, the indictment said.
The accused hackers exploited that research, contacting Witt's former colleagues through imposter Facebook and email accounts. Their goal was to induce the targets to click on links and attachments containing malicious software that, if opened, could compromise their computer and networks.
The indictment includes snippets of dialogue between Witt and the person who hired her, identified only as Individual A.
In 2012, for instance, the person wrote her, "should i thank the sec of defense...u were well trained. Witt replied with a smiley emoticon, "LOL thank the sec of defense? For me? Well, I loved the work, and I am endeavoring to put the training I received to good use instead of evil. ?? Thanks for giving me the opportunity," according to the indictment.
Using a typed smiley-face, she later told the same person, "If all else fails, I just may go public with a program and do like Snowden." That's a reference to Edward Snowden, a former NSA contractor who leaked classified U.S. information.
"Our intelligence professionals swear an oath to protect our country, and we trust them to uphold their oath. With good reason," said Assistant Attorney General John Demers, the head of the Justice Department's national security division. "But every great while, one of these trusted people fails us."
Officials would not elaborate on why the indictment was brought six years after her detection, except to say they had to move classified intelligence into an unclassified format to be used in a criminal case.
Justice Department officials wouldn't say whether Witt's prosecution was connected to an American-born Iranian television anchorwoman who was recently released after being detained by the FBI as a material witness in an undisclosed U.S. case.
Marzieh Hashemi works for the Press TV network's English-language service. She has not been charged with any crimes.
Federal law allows judges to order witnesses to be detained if the government can prove their testimony has extraordinary value for a criminal case and that they'd be a flight risk and unlikely to respond to a subpoena. The statute generally requires those witnesses to be released once they're deposed.