Abcnews 17 Iranians Charged in Cyber Theft Campaign Targeting U.S. Institutions
Article Content
- •17 Iranian nationals charged for cyber theft linked to the Mabna Institute.
- •Over 31 terabytes of data stolen from U.S. universities and government agencies.
- •The campaign utilized spear phishing and password spraying techniques.
The U.S. Department of Justice has unsealed a superseding indictment against 17 Iranian nationals linked to the Mabna Institute, alleging a coordinated cyber theft campaign on behalf of Iran's Islamic Revolutionary Guard Corps (IRGC). The hackers targeted 144 U.S.-based universities, 42 private sector companies, and five federal and state government agencies, stealing over 31 terabytes of academic data and intellectual property. The indictment expands on a previous case from 2018, which initially charged nine of the defendants. The hackers utilized methods such as spear phishing and password spraying to access email accounts, successfully breaching approximately 8,000 professor accounts. The campaign, which began in 2013, has significant implications for U.S. national security and economic interests. The DOJ is offering a $10 million reward for information leading to the capture of several defendants. The ongoing U.S.-Iran conflict adds urgency to these charges.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (55)
Following this threat?
Track Department Of Labor in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Citrix NetScaler Critical Vulnerabilities Exploited: Urgent Patching Required Citrix NetScaler ADC and Gateway products are affected by critical vulnerabilities CVE-2026-88771 and CVE-2026-88772, both assigned a CVSS score of 9.5. The Cybersecurity and Infrastructure Security Agency (CISA) added these CVEs to its Known Exploited Vulnerabilities catalog on September 27, 2026, and mandated…
Critical Citrix NetScaler Zero-Day Vulnerabilities Exploited Citrix disclosed two critical zero-day vulnerabilities, CVE-2026-88771 and CVE-2026-88772, affecting NetScaler ADC and Gateway systems, which are being actively exploited. Both vulnerabilities have a CVSS score of 9.5 and allow unauthenticated attackers to execute arbitrary commands remotely. CVE-2026-88771 arises…