Threat actor
Mabna Institute
Iran
Tracked by CyberSIXT since 19 Aug
- Articles · all time
- 7
- Articles · last 30 days
- 2
- CVEs exploited · attributed · all time
- 0
- Research reports · all time
- 0
7 articles from 1 outlet since 19 Aug; the latest 21 days ago.
- Article
- First report
Show as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Mon 5 Oct · 09:22 UTC | Security Affairs | Montenegro Extradites Iranian Hacker Accused of Stealing 31TB of Data |
| Fri 2 Oct · 11:54 UTC | SecurityWeek | Iranian Mabna Institute Hacker Extradited to US Over Cyberattacks |
| Tue 25 Aug · 09:41 UTC | Infosecurity | US imposes sanctions on Mabna Institute over $16.8M crypto |
| Thu 20 Aug · 08:51 UTC | Security Affairs | US Indicts 17 Iranian Hackers Over 31TB University Data Theft |
| Wed 19 Aug · 13:58 UTC | DataBreaches | DOJ indicts 17 Iranians over Mabna Institute campus hack spree |
| Wed 19 Aug · 12:10 UTC | SecurityWeek | US indicts Iran's Mabna Institute for massive academic data theft |
| Wed 19 Aug · 05:00 UTC | SecurityOnline | US Indicts Iran’s Mabna Institute for Huge University Cyber Theft |
Names and sources
- Silent Librarian
- Named by CyberSIXT coverage
- COBALT DICKENS
- Named by Malpedia · silent_librarian
- Mabna Institute
- Named by Malpedia · silent_librarian
- Mabna Institute Group
- Named by Malpedia · silent_librarian
- Silent Librarian
- Named by Malpedia · silent_librarian
- TA407
- Named by Malpedia · silent_librarian
- TA4900
- Named by Malpedia · silent_librarian
- Yellow Nabu
- Named by Malpedia · silent_librarian
All 19 names
- COBALT DICKENS
- Named by MISP Galaxy · 5059b44d-2753-4977-b987-4922f09afe6b
- Mabna Institute
- Named by MISP Galaxy · 5059b44d-2753-4977-b987-4922f09afe6b
- Mabna Institute Group
- Named by MISP Galaxy · 5059b44d-2753-4977-b987-4922f09afe6b
- Silent Librarian
- Named by MISP Galaxy · 5059b44d-2753-4977-b987-4922f09afe6b
- TA407
- Named by MISP Galaxy · 5059b44d-2753-4977-b987-4922f09afe6b
- TA4900
- Named by MISP Galaxy · 5059b44d-2753-4977-b987-4922f09afe6b
- Yellow Nabu
- Named by MISP Galaxy · 5059b44d-2753-4977-b987-4922f09afe6b
- COBALT DICKENS
- Named by MITRE ATT&CK® · G0122
- Silent Librarian
- Named by MITRE ATT&CK® · G0122
- TA407
- Named by MITRE ATT&CK® · G0122
- 5059b44d-2753-4977-b987-4922f09afe6b
- Named by CyberSIXT coverage
Attributed facts
- origin
- Iran (MISP Galaxy · 5059b44d-2753-4977-b987-4922f09afe6b)
MITRE ATT&CK® techniques
From MITRE ATT&CK® · G0122
Reconnaissance
Resource Development
Initial Access
- T1078
- Valid Accounts
Persistence
- T1078
- Valid Accounts
Privilege Escalation
- T1078
- Valid Accounts
Stealth
- T1078
- Valid Accounts
Credential Access
- T1110.003
- Password Spraying
© 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. All techniques on MITRE ATT&CK
- Montenegro Extradites Iranian Hacker Accused of Stealing 31TB of DataSecurity Affairs
- Iranian Mabna Institute Hacker Extradited to US Over CyberattacksSecurityWeek
- US imposes sanctions on Mabna Institute over $16.8M cryptoInfosecurity
- US Indicts 17 Iranian Hackers Over 31TB University Data TheftSecurity Affairs
- DOJ indicts 17 Iranians over Mabna Institute campus hack spreeDataBreaches
- US indicts Iran's Mabna Institute for massive academic data theftSecurityWeek
- US Indicts Iran’s Mabna Institute for Huge University Cyber TheftSecurityOnline · first in our coverage