Silent Librarian
COBALT DICKENSMabna InstituteTA407TA4900Yellow NabuMabna Institute Group
Last Friday, Deputy Attorney General Rod Rosenstein announced the indictment of nine Iranians who worked for an organization named the Mabna Institute. According to prosecutors, the defendants stole more than 31 terabytes of data from universities, companies, and government agencies around the world. The cost to the universities alone reportedly amounted to approximately $3.4 billion. The… Source: MISP
Attributed country: IR according to MISP
Activity on Jábega · 12 weeks
1 stories · first seen on 2 Oct 2026 · last seen on 2 Oct 2026
News
- In Rare Move, Iranian Hacker Accused of Working for IRGC Extradited to USSecurityWeek · 2 Oct 2026
MITRE ATT&CK techniques
Reconnaissance
T1589.002Email Addresses 1 Sigma rulesT1589.003Employee NamesT1594Search Victim-Owned WebsitesT1598.003Spearphishing Link
Resource Development
T1583.001DomainsT1585.002Email AccountsT1588.002Tool 7 Sigma rulesT1588.004Digital CertificatesT1608.005Link Target
Initial Access
Credential Access
Collection
Relationships come from co-occurrence in the news, not attribution. Sources: MISP galaxy, MITRE ATT&CK and SigmaHQ. attack.mitre.org ↗