The U.S. has charged 17 Iranians, alleged members of a hacking-for-hire company called Mabna Institute, involved in years-long operations that stole data from American organizations.
Nine of the defendants were previously charged in a March 2018 indictment for hacking more than 300 universities and private companies.
The U.S. Justice Department (DoJ) has also announced rewards of up to $10 million for information leading to the location of five of the 17 Iranian defendants.
According to the U.S. government, the newly charged eight individuals stole academic research, intellectual property, emails, and other proprietary information.
The DoJ says that the Iranians listed below were involved in cyber operations for the Islamic Republic of Iran’s Islamic Revolutionary Guard Corps (IRGC), other Iranian government bodies, universities, and paying customers.
“Today’s charges, which include eight additional defendants, reveal the broader network allegedly behind a sweeping, state-sponsored campaign to steal research and intellectual property from American universities, businesses, and government institutions,” stated U.S. Attorney Jamie McDonald.
“More than eight years after making the original indictment public, these charges make clear that the passage of time will not deter us from identifying and pursuing those who target the United States from abroad.”
The DoJ’s announcement says the operation is believed to have begun around 2013 and targeted the accounts of more than 100,000 professors worldwide, successfully compromising roughly 8,000 of them.
Using access to these accounts, the hackers reportedly stole 31.5 terabytes of academic data, including journals, theses, dissertations, ebooks, and research across numerous disciplines, valued at approximately $3.4 billion.
This activity has impacted 178 universities, 144 of which are in the U.S., at least 53 private firms, 42 of which are in the U.S., two NGOs, and at least 10 U.S. state agencies.
One of the victims highlighted in the announcement was HBO, which was reportedly extorted for $6 million worth of Bitcoin.
The defendants now face charges related to conspiracy to commit computer intrusions, wire fraud, unauthorized access for financial gain, and aggravated identity theft, which can incur maximum penalties of up to 20 years in prison.
The State Department has also announced it is offering rewards of up to $10,000,000 for information leading to the whereabouts of Behzad Mesri, Mojtaba Galekuhi, Arman Kahzadian, Keyvan Fayaz, and Saber Shahbazi Ballojeh.
A Tor link has also been provided to allow anonymous submissions. All defendants are presumed innocent until proven guilty in a court of law.
Overall prevention scores can hide what happens after initial access. Once attackers are using valid credentials, prevention drops sharply.
The Blue Report 2026 measures defenses technique by technique across 338 million simulations run in customer production environments.
Police seize “First VPN” service used in ransomware, data theft attacks
DOJ seizes CFAKE, SOCFAKE deepfake nude sites under TAKE IT DOWN Act
Hackers arrested over €30M bank fraud exploiting service provider flaw
Police dismantle Kratos phishing platform, arrest developer
New HollowGraph malware uses Microsoft Graph for stealthy C2 comms
Funny how they are Iranian , a country notorious for online criminal activity . and human rights violations.
Microsoft confirms GitHub is down worldwide
Hacker claims 3.6 million Azure account records stolen from major companies
Microsoft working on Defender patch for ShieldBreak zero-day
Certighost CVE is new. The privilege behind it isn’t. Discover where yours is hiding.
Stay one step ahead of new threats in the new year. Join Huntress for the monthly Tradecraft Tuesday.
Signature-based prevention fell to 50%. See what your controls still stop.
Stop AI slopsquatting attacks. Secure open source package ingestion before it hits your build.
91% of AI Apps Appeared in 16 Months. Get Material’s OAuth Risk Report
Terms of Use – Privacy Policy – Ethics Statement – Affiliate Disclosure
Read our posting guidelinese to learn what content is prohibited.
