US charges 17 Iranians over alleged long-running cyber theft campaign

The US Department of Justice has charged 17 Iranian nationals over what it described as a long-running, state-sponsored cyber theft campaign targeting American universities and private companies. Prosecutors said the alleged operation was carried out by members of the Iran-based Mabna Institute and ran from about 2013 until at least December 2017. The case centres on claims that the group stole academic data and intellectual property on a large scale.

Sponsored

According to the department, the alleged campaign targeted the computer systems of 144 US universities and 42 private sector firms. Officials said more than 31 terabytes of academic data and intellectual property were taken, with an estimated value of about $3.4bn. The department also said the hackers targeted the accounts of 100,000 academics worldwide and successfully compromised 8,000 professor email accounts at 144 US universities and 178 academic institutions internationally.

The Justice Department said many of the attacks were carried out on behalf of Iran's Islamic Revolutionary Guard Corps, as well as for other Iranian government and university clients. FBI Assistant Director in Charge James C Barnacle Jr said the co-ordinated cyber attacks were a serious threat to national security. US Attorney for the Southern District of New York Jamie McDonald said cyber operations had become a central instrument of national power, warning of their impact on security and the economy.

The allegations add to long-running concerns in Washington about state-linked cyber activity and the targeting of research institutions. Universities are often seen as attractive targets because they hold sensitive research, personal data and intellectual property linked to science, technology and defence. The case also underlines how cyber theft can affect not only academic institutions but also private firms and government agencies.

Sponsored

The department said the Mabna Institute was founded in 2013 to help Iranian academic organisations gain access to non-Iranian scientific resources. It also said the group targeted employee email accounts from at least five US federal and state government agencies, along with at least 42 US-based private companies and 11 foreign companies in Germany, Italy, Switzerland, Sweden and the UK. The department announced a $10m reward for information leading to the location of five of the alleged hackers-for-hire.

It was not immediately clear where the accused individuals are now or whether any have been detained. The Justice Department did not say when any court proceedings would begin. The case is likely to remain a focus for US law enforcement and national security officials as they seek to identify the people named in the charges and assess the wider impact of the alleged campaign.

#USDepartmentofJustice #Iran #MabnaInstitute #IslamicRevolutionaryGuardCorps #cybertheft #universities #intellectualproperty