The United States has taken legal action against 17 individuals associated with Iran’s Mabna Institute, formally accusing them of executing cyberattacks on numerous entities in the US and internationally. This move underscores the ongoing cyber conflict with Iran.
Indictment Details and Cyber Intrusions
The indictment, spanning 14 counts, highlights the creation of the Mabna Institute in 2013. Its primary objective was to aid Iranian universities and research organizations by unlawfully acquiring scientific resources from abroad. The indictment reveals targeted cyber intrusions affecting 144 US universities, 178 international educational institutions, 42 US private firms, and 11 overseas companies. Additionally, five US government entities and two NGOs were victimized, resulting in the theft of over 31 terabytes of data.
The accused hackers acted under the auspices of the Islamic Revolutionary Guard Corps (IRGC). The Mabna Institute’s founders, Gholamreza Rafatnejad and Ehsan Mohammadi, along with associates such as Abdollah Karima and others, allegedly spearheaded these cyber intrusions.
Global Impact and Academic Data Breach
According to the indictment, the cyber operations compromised email accounts of approximately 8,000 professors worldwide. These breaches extended across a multitude of nations, including Australia, Canada, and several European and Asian countries. The hackers exploited stolen credentials to siphon data from various academic disciplines, including engineering, medicine, and technology.
The stolen information was allegedly commercialized through entities like Megapaper and Gigapaper, linked to one of the defendants, Abdollah Karima. This operation not only facilitated data theft but also monetized the information unlawfully acquired from academic institutions.
US Response and International Collaboration
The US government has responded with a significant bounty offer through its Rewards for Justice program. Up to $10 million is promised for information leading to the capture of key defendants, including Mesri, Galekuhi, and others. This initiative underlines the US’s commitment to international law enforcement collaboration to curb cyber threats.
The indictment also connects the hackers to other high-profile cybercrimes, including an extortion attempt against HBO amounting to $6 million. This underscores the breadth of their cybercriminal activities beyond academic circles.
The US’s aggressive stance reflects a broader strategy to counteract cyber threats posed by state-affiliated actors. As this case progresses, it highlights the critical need for international cooperation in cybersecurity enforcement and the protection of intellectual property.
