Mabna Institute campaign expands across multiple victims
Campaign
Summary
Hide ▲
Show ▼
A Mabna Institute-linked campaign tied to the IRGC began around 2013 and targeted more than 100,000 professors worldwide, with about 8,000 accounts compromised and 31.5 terabytes of academic data stolen from universities, businesses, and government institutions. The U.S. Justice Department said 17 Iranians were charged on August 19, and the Justice Department and State Department offered rewards of up to $10 million for information leading to five defendants. On August 24, the U.S. sanctioned five individuals linked to Mabna Institute under Operation Economic Outcast, and OFAC published 30 crypto addresses across Bitcoin, Ethereum, and TRON tied to four defendants. TRM Labs said the traced addresses held about $16.8m dating back to 2018, with large portions linked to Keyvan Fayaz and additional funds associated with Behzad Mesri.
Related Happenings
DoJ charges Mabna Institute members and State Department offers reward
Law Enforcement
H score70
First: 20.08.2026 20:23
Last: 20.08.2026 20:23
Sources 1
About this happening:
U.S. Department of Justice charged 17 Mabna Institute members in a cyber intrusion case tied to Iran's IRGC, and the U.S. Department of State announced a $10...
DoJ charges Mabna Institute members and State Department offers reward
Law EnforcementAbout this happening: U.S. Department of Justice charged 17 Mabna Institute members in a cyber intrusion case tied to Iran's IRGC, and the U.S. Department of State announced a $10...
DoJ charges Mabna Institute-linked Iranian hackers
Law Enforcement
H score68
First: 19.08.2026 18:56
Last: 19.08.2026 18:56
Sources 1
How related:
The U.S. has charged 17 Iranians, alleged members of a hacking-for-hire company called Mabna Institute, involved in years-long operations that stole data from American organizations.
About this happening:
The U.S. Justice Department charged 17 Iranians tied to Mabna Institute, escalating a cross-border cybercrime case centered on long-running theft of data from Amer...
DoJ charges Mabna Institute-linked Iranian hackers
Law EnforcementHow related: The U.S. has charged 17 Iranians, alleged members of a hacking-for-hire company called Mabna Institute, involved in years-long operations that stole data from American organizations.
About this happening: The U.S. Justice Department charged 17 Iranians tied to Mabna Institute, escalating a cross-border cybercrime case centered on long-running theft of data from Amer...
Conti campaign expands across multiple victims
Campaign
H score38
First: 12.06.2026 20:54
Last: 12.06.2026 20:54
Sources 1
About this happening:
The Conti ransomware operation ran as a large-scale 2021-2022 extortion campaign that stole data and encrypted devices to pressure victims into paying Bitcoin....
Conti campaign expands across multiple victims
CampaignAbout this happening: The Conti ransomware operation ran as a large-scale 2021-2022 extortion campaign that stole data and encrypted devices to pressure victims into paying Bitcoin....
Finnish arrest and U.S. charges in Bouquet Scattered Spider case
Law Enforcement
H score45
First: 28.04.2026 18:39
Last: 28.04.2026 18:39
Sources 1
About this happening:
Finnish law enforcement arrested Bouquet, and U.S. federal prosecutors later charged him in a cross-border Scattered Spider cybercrime case. The charges include ...
Finnish arrest and U.S. charges in Bouquet Scattered Spider case
Law EnforcementAbout this happening: Finnish law enforcement arrested Bouquet, and U.S. federal prosecutors later charged him in a cross-border Scattered Spider cybercrime case. The charges include ...
Scattered Spider SMS phishing and SIM-swap crypto theft campaign
Campaign
H score53
First: 20.04.2026 16:33
Last: 20.04.2026 16:33
Sources 1
About this happening:
The Scattered Spider campaign used SMS phishing and SIM swap attacks to steal employee credentials, hijack phone numbers, and take over email and virtual currency wa...
Scattered Spider SMS phishing and SIM-swap crypto theft campaign
CampaignAbout this happening: The Scattered Spider campaign used SMS phishing and SIM swap attacks to steal employee credentials, hijack phone numbers, and take over email and virtual currency wa...
Timeline
-
25.08.2026 12:10 1 articles · 8d ago
US sanctions Mabna Institute-linked hackers and crypto addresses
Legal Policy Action UpdateThe US imposed sanctions on five individuals linked to the Mabna Institute as part of Operation Economic Outcast, and OFAC published designations covering 30 crypto addresses across Bitcoin, Ethereum, and TRON tied to four defendants. TRM Labs said the traced addresses held about $16.8m dating back to 2018, with a large share linked to Keyvan Fayaz and additional funds associated with Behzad Mesri.
Show sources
- US Sanctions Mabna Institute Hackers for Iranian Cyber-Attacks — www.infosecurity-magazine.com — 25.08.2026 12:10
-
19.08.2026 18:56 2 articles · 13d ago
U.S. charges 17 Iranians tied to Mabna Institute
Campaign Scope UpdateThe U.S. charged 17 Iranians tied to Mabna Institute and said the years-long operation began around 2013, targeted more than 100,000 professors worldwide, compromised roughly 8,000 accounts, and enabled theft of 31.5 terabytes of academic data valued at about $3.4 billion from universities, businesses, and government institutions; the Justice Department and State Department also announced rewards of up to $10 million for information leading to the whereabouts of five defendants.
Show sources
- US charges Iranian hackers over $3.4 billion intellectual property theft — www.bleepingcomputer.com — 19.08.2026 18:56
- US charges Iranian hackers over $3.4 billion intellectual property theft — www.bleepingcomputer.com — 19.08.2026 18:56