Monday, April 7, 2025
HomeSecurity NewsU.S. Department of Justice Charged Nine Iranian Hackers for Conducting Massive Cyber...

U.S. Department of Justice Charged Nine Iranian Hackers for Conducting Massive Cyber Theft Campaign

Published on

SIEM as a Service

Follow Us on Google News

The U.S. Department of Justice Charged Nine Iranian Hackers for conducting a massive cyber theft campaign to steal academic data and intellectual property from U.S.& foreign universities, private companies, and U.S. government entities.

The cybercriminals were the affiliate of the Iran based Mabna Institute and they coordinated with the campaign starting at least from 2013 to December 2017.

During this Four-year campaign attackers successfully infiltrated into 8,000 professor email accounts across 144 U.S.-based universities, 76 universities located in foreign countries and 30 American companies.

According to the court statement, attackers charged into all fields of research and academic disciplines, including science and technology, engineering, social sciences, medical, and other professional fields.

- Advertisement - Google News

They approximately stolen more than 31 terabytes of data and intellectual property, their main goal is to steal the professor’s login details to gain unauthorized access to the system and steal whatever data available.

“Today, in one of the largest state-sponsored hacking campaigns ever prosecuted by the Department of Justice, we have unmasked criminals who normally hide behind the ones and zeros of computer code,” said U.S. Attorney Berman.

This massive theft campaign attack focused on a number of universities in 22 countries and dozens of private segment companies and governmental organizations directed in the interest of Iran’s Islamic Revolutionary Guard.

Also Read Hacking vs Spying: How puzzling it is to Find the Hackers in Cyber World

Iran based Mamba institute was found by the defendants Gholamreza Rafatnejad and Ehsan Mohammadi and their goal is to assist Iranian universities and scientific sectors by stealing other countries scientific resources.

The State-Sponsored hacker group contracted with both Iranian governmental and private entities for conducting hacking on their behalf reads court statement.

Name and roles of Nine Iranian Hackers

Gholamreza Rafatnejad – Founder of the Mabna Institute.

Ehsan Mohammadi – Founder of the Mabna Institute and organize university hacking campaigns.

Seyed Ali Mirkarimi – Hacker and contractor of Mabna Institute, engaged in various hacking campaigns.

Mostafa Sadeghi – Affiliate of Mabna Institute, who hacked more than 1,000 university professor’s accounts.

Sajjad Tahmasebi – Mabna Institute contractor who organized spearphishing campaign targeting universities.

Abdollah Karima – Businessman who sold the stolen academic data.

Abuzar Gohari Moqadam – Professor and affiliate of Mabna Institute.

Mohammed Reza Sabahi – Associate of Mabna Institute Involved in spear phishing activities.

Behzad Mesri – Targets Media companies, who illegally gained access to HBO Network and leaked unreleased scripts of Game of Thrones.

The Cyber Theft Campaign campaign targets following countries Australia, Canada, China, Denmark, Finland, Germany, Ireland, Israel, Italy, Japan, Malaysia, Netherlands, Norway, Poland, Singapore, South Korea, Spain, Sweden, Switzerland, Turkey and the United Kingdom.

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Threat Actors Exploit Fake CAPTCHAs and Cloudflare Turnstile to Distribute LegionLoader

In a sophisticated attack targeting individuals searching for PDF documents online, cybercriminals are using...

HellCat, Rey, and Grep Groups Dispute Claims in Orange and HighWire Press Cases

SuspectFile.com has uncovered a complex web of overlapping claims and accusations within the cybercrime...

AI Surpasses Elite Red Teams in Crafting Effective Spear Phishing Attacks

In a groundbreaking development in the field of cybersecurity, AI has reached a pivotal...

Threat Actors Use Windows Screensaver Files as Malware Delivery Method

Cybersecurity experts at Symantec have uncovered a sophisticated phishing campaign targeting various sectors across...

Supply Chain Attack Prevention

Free Webinar - Supply Chain Attack Prevention

Recent attacks like Polyfill[.]io show how compromised third-party components become backdoors for hackers. PCI DSS 4.0’s Requirement 6.4.3 mandates stricter browser script controls, while Requirement 12.8 focuses on securing third-party providers.

Join Vivekanand Gopalan (VP of Products – Indusface) and Phani Deepak Akella (VP of Marketing – Indusface) as they break down these compliance requirements and share strategies to protect your applications from supply chain attacks.

Discussion points

Meeting PCI DSS 4.0 mandates.
Blocking malicious components and unauthorized JavaScript execution.
PIdentifying attack surfaces from third-party dependencies.
Preventing man-in-the-browser attacks with proactive monitoring.

More like this

Advanced CoffeeLoader Malware Evades Security to Deliver Rhadamanthys Shellcode

Security researchers at Zscaler ThreatLabz have identified a new sophisticated malware family called CoffeeLoader,...

Clio: Real-Time Logging Tool with Locking, User Authentication, and Audit Trails

Clio is a cutting-edge, secure logging platform designed specifically for red team operations and...

Enhancing Satellite Security by Encrypting Video Data Directly on Payloads

The rapid expansion of low-Earth orbit (LEO) satellite constellations has underscored the need for...