US Indicts 17 Iranian Hackers in Cybercrime Case, Offers $10M Rewards for 5 Suspects

Post Views: 9

U.S. Indicts 17 Iranian Cybercriminals, Offers $10M Bounties for Five

Indictment Details

The U.S. has indicted 17 individuals linked to the Iran-based Mabna Institute, accusing them of orchestrating cyberattacks against numerous entities across the globe. The 14-count superseding indictment details the organization’s activities from 2013, when it was established to facilitate the unauthorized acquisition of scientific resources from non-Iranian institutions.

The Mabna Institute’s Activities

The group allegedly targeted academic and research organizations, private enterprises, government agencies, and non-governmental entities, stealing vast quantities of intellectual property and sensitive data. The indictment states that the Mabna Institute operated under the direction of the Islamic Revolutionary Guard Corps (IRGC), with its founders including Gholamreza Rafatnejad and Ehsan Mohammadi.

Defendants and Their Roles

The defendants, who include Abdollah Karima (also known as Vahid Karima), Mostafa Sadeghi, Seyed Ali Mirkarmi, and others, allegedly executed cyber intrusions on behalf of both Iranian state interests and private entities. The operation compromised over 100,000 academic professionals worldwide, with approximately 8,000 professor accounts breached at 144 U.S. universities and 178 institutions in countries such as Australia, Canada, China, Germany, Japan, and the United Kingdom.

Data Theft and Monetization

Stolen credentials were used to access academic accounts, enabling the exfiltration of research data spanning engineering, medicine, technology, and other disciplines. The stolen material, totaling more than 31 terabytes, included proprietary research and employee account details. The defendants reportedly sold the data through affiliated companies Megapaper and Gigapaper, which were linked to Abdollah Karima.

High-Profile Targets

Additionally, the group targeted private organizations, including a high-profile $6 million extortion attempt against HBO. The U.S. Department of Justice has designated five individuals for reward under the Rewards for Justice program, offering up to $10 million for information leading to the arrest of Behzad Mesri, Mojtaba Galekuhi, Arman Kahzadian, Keyvan Fayaz, and Saber Shahbazi Ballojeh.

Scope of the Operation

The indictment highlights the scale of the operation, which impacted at least 144 U.S. universities, 178 international institutions, 42 U.S. private companies, 11 foreign private entities, five U.S. government agencies, and two NGOs. The case underscores the involvement of state-sponsored actors in cyber operations aimed at undermining academic and technological competitiveness.

Sophisticated Cyber Techniques

The defendants’ activities, according to the indictment, involved sophisticated techniques to bypass security measures, exploit vulnerabilities in institutional networks, and monetize stolen data through clandestine channels. The U.S. government has emphasized the importance of international collaboration in addressing such threats, while the rewards program seeks to incentivize global efforts to apprehend those responsible.

“The U.S. government has emphasized the importance of international collaboration in addressing such threats, while the rewards program seeks to incentivize global efforts to apprehend those responsible.”

Conclusion

The case highlights the growing threat of state-sponsored cyber operations and the need for coordinated global efforts to protect critical institutions and data. The U.S. continues to take decisive action against cybercriminals, leveraging legal and financial incentives to disrupt malicious activities.