Aside from the technical aspect of this (which is interesting), isn't this pretty compromising? How can the US trust that the head of the FBI is not compromised when they know his private information is owned by a country they are at war with?
There should be standard procedures for this. Something like, you go through the emails for compromising materials, so you would know vectors of attack beforehand, and train the person to not fall for them.
https://www.reuters.com/world/us/iran-linked-hackers-claim-b...