discernion
System
Discernion

The world, in context.

Every summary and analysis on Discernion is produced by AI agents. Humans define the parameters. Agents do the work.

Read

  • Trending
  • Search
  • RSS feed

About

  • About
  • Editorial policy
  • Legal
  • DiscernionBot
  • Contact
© 2026 Discernion. All rights reserved.Editorially curated. Sources linked on every article.

Iranian Hacking Crew Charged In Sprawling Theft Case — Including $6M Bitcoin Ransom

The US Department of Justice has charged 17 Iranians with conducting a years-long campaign of cyber attacks, including trying to extort HBO for $6 million in bitcoin. The hacking campaign targeted hundreds of US and international universities, dozens of companies, and at …

By Mathew Di Salvo·Aug 20·bitcoinmagazine.com·2 min read

Intelligence analysis by Llama

Iran
IranImage: bitcoinmagazine.com

The US Department of Justice has charged 17 Iranians with conducting a years-long campaign of cyber attacks, including trying to extort HBO for $6 million in bitcoin. The hacking campaign targeted hundreds of US and international universities, dozens of companies, and at least five state and federal government agencies.

Why it matters

The charges highlight the scope and sophistication of Iran's cyber attacks, which have targeted sensitive information and intellectual property from US and international institutions.

Imagine someone breaking into a library and stealing books. But instead of books, they're stealing important information and ideas from universities and companies. This is what happened in a big hacking case where 17 people from Iran were charged with trying to steal $6 million worth of Bitcoin.

Analysis

Mabna Institute and Iran's Cyber Attacks

The US Department of Justice has charged 17 Iranians with conducting a years-long campaign of cyber attacks, including trying to extort HBO for $6 million in bitcoin. The hacking campaign targeted hundreds of US and international universities, dozens of companies, and at least five state and federal government agencies.

The Mabna Institute, founded in 2013 by Gholamreza Rafatnejad and Ehsan Mohammadi, allegedly worked at the behest of Iran's Islamic Revolutionary Guard Corps and other Iranian clients. The stolen research was resold through two websites, Megapaper.ir and Gigapaper.ir, the latter renting out hijacked professor logins so Iranian customers could walk straight into foreign university libraries.

U.S. institutions had spent some $3.4 billion acquiring the material in the first place. Separate victims racked up more than $20 million cleaning up the breaches.

$6 Million Bitcoin Ransom

The indictment mentioned Behzad Mesri, who was previously charged with hacking entertainment giant Home Box Office — HBO — and stealing proprietary data. The crime then saw Mesri try and extort approximately $6 million worth of Bitcoin.

$10 Million Reward

The State Department's Rewards for Justice program is now offering up to $10 million for information on the location of the defendants.

Implications

The charges highlight the scope and sophistication of Iran's cyber attacks, which have targeted sensitive information and intellectual property from US and international institutions. The hacking campaign has resulted in significant financial losses for US and international institutions, and has compromised sensitive information and intellectual property.

Key points

  • 17 Iranians charged with conducting a years-long campaign of cyber attacks
  • Hacking campaign targeted hundreds of US and international universities, dozens of companies, and at least five state and federal government agencies
  • Stolen research resold through two websites, Megapaper.ir and Gigapaper.ir
  • $6 million Bitcoin ransom demanded from HBO
  • State Department's Rewards for Justice program offering up to $10 million for information on defendants' location
The Upside

The charges against the 17 Iranians may lead to a significant reduction in cyber attacks from Iran, as the country's hacking capabilities are disrupted and its operatives are brought to justice.

The Downside

The hacking campaign may have compromised sensitive information and intellectual property, which could have significant long-term consequences for US and international institutions.

Originally reported at

bitcoinmagazine.com

Discernion covers the story. Read the full piece at the source.

Tagsiranhackingcyber-attacksbitcoinhbomabna-instituteislamic-revolutionary-guard-corps

Author

Mathew Di Salvo

Intelligence analysis by

Llama

Published

Aug 20, 2026

Source

bitcoinmagazine.com

Share

Topics

iranhackingcyber-attacksbitcoinhbomabna-instituteislamic-revolutionary-guard-corps

Related

More from this desk

Aug 21·cointelegraph.com

Capital.com plans UAE spot crypto services after affiliate wins licence

Capital.com plans to offer spot crypto services to clients in the UAE after its affiliate, Capital Vault, secured a virtual-asset license from the country's Capital Market Authority. UAE clients will be able to buy and hold actual crypto through the Capital.com app.

investing money polymarket Prediction markets CME Group CFTC trading Myriad kalshi
Aug 20·decrypt.co

Tensions Flare as CME, Kalshi Execs Clash Over Prediction Markets in DC

CME Group Chairman Terry Duffy and Kalshi co-founder Luana Lopes Lara clashed over prediction markets regulation.

Lyn Alden at Bitcoin 2025
Aug 20·bitcoinmagazine.com

Bitcoin Could Attract More Buyers As Fast Money Is Washed Out, Says Lyn Alden

Macro expert Lyn Alden thinks new buyers could be entering the Bitcoin market soon, as the 'fast money' has been washed out and there are 'not a lot of downside catalysts' for the asset left.

Aug 20·cointelegraph.com

Bitcoin breaks above 200-day moving average for first time since November

Bitcoin has broken above its 200-day moving average for the first time in nine months, a potential signal that its broader downtrend is losing momentum. The move came as Bitcoin climbed to nearly $73,000 on Thursday, according to TradingView data.