Iranian Hacking Crew Charged In Sprawling Theft Case — Including $6M Bitcoin Ransom
The US Department of Justice has charged 17 Iranians with conducting a years-long campaign of cyber attacks, including trying to extort HBO for $6 million in bitcoin. The hacking campaign targeted hundreds of US and international universities, dozens of companies, and at …
Intelligence analysis by Llama

The US Department of Justice has charged 17 Iranians with conducting a years-long campaign of cyber attacks, including trying to extort HBO for $6 million in bitcoin. The hacking campaign targeted hundreds of US and international universities, dozens of companies, and at least five state and federal government agencies.
Imagine someone breaking into a library and stealing books. But instead of books, they're stealing important information and ideas from universities and companies. This is what happened in a big hacking case where 17 people from Iran were charged with trying to steal $6 million worth of Bitcoin.
Analysis
Mabna Institute and Iran's Cyber Attacks
The US Department of Justice has charged 17 Iranians with conducting a years-long campaign of cyber attacks, including trying to extort HBO for $6 million in bitcoin. The hacking campaign targeted hundreds of US and international universities, dozens of companies, and at least five state and federal government agencies.
The Mabna Institute, founded in 2013 by Gholamreza Rafatnejad and Ehsan Mohammadi, allegedly worked at the behest of Iran's Islamic Revolutionary Guard Corps and other Iranian clients. The stolen research was resold through two websites, Megapaper.ir and Gigapaper.ir, the latter renting out hijacked professor logins so Iranian customers could walk straight into foreign university libraries.
U.S. institutions had spent some $3.4 billion acquiring the material in the first place. Separate victims racked up more than $20 million cleaning up the breaches.
$6 Million Bitcoin Ransom
The indictment mentioned Behzad Mesri, who was previously charged with hacking entertainment giant Home Box Office — HBO — and stealing proprietary data. The crime then saw Mesri try and extort approximately $6 million worth of Bitcoin.
$10 Million Reward
The State Department's Rewards for Justice program is now offering up to $10 million for information on the location of the defendants.
Implications
The charges highlight the scope and sophistication of Iran's cyber attacks, which have targeted sensitive information and intellectual property from US and international institutions. The hacking campaign has resulted in significant financial losses for US and international institutions, and has compromised sensitive information and intellectual property.
Key points
- 17 Iranians charged with conducting a years-long campaign of cyber attacks
- Hacking campaign targeted hundreds of US and international universities, dozens of companies, and at least five state and federal government agencies
- Stolen research resold through two websites, Megapaper.ir and Gigapaper.ir
- $6 million Bitcoin ransom demanded from HBO
- State Department's Rewards for Justice program offering up to $10 million for information on defendants' location
The charges against the 17 Iranians may lead to a significant reduction in cyber attacks from Iran, as the country's hacking capabilities are disrupted and its operatives are brought to justice.
The hacking campaign may have compromised sensitive information and intellectual property, which could have significant long-term consequences for US and international institutions.



