Seventeen charges after thirteen years means we were polite for too long.
DOJ charges 17 with cyber theft on behalf of Iranian government
DOJ charged 17 people in an Iran-run Mabna Institute campaign of cyber theft that prosecutors say has been running since at least 2013.
Summary
- The Justice Department charged 17 people with cyber theft on behalf of the Iranian government.
- Prosecutors say members of the Iran-based Mabna Institute have conducted coordinated cyber intrusions since at least 2013.
- The case sits inside a wider pattern of Tehran using contractors and institutes to steal data the regime cannot buy cleanly.
- A long-running intrusion campaign is a sanctions-evasion tool as much as a spy tool: steal the research, skip the license.
Commentary
A sysadmin still tastes burnt coffee at 2 a.m. when the SIEM lights up and the help desk is empty. That is the hour Iran's contractors like. Thirteen years is not a smash-and-grab. It is a lease on someone else's intellectual property.
That is the gap. An American lab waits six months for an export license. Mabna, prosecutors say, waited for a phishing click. Seventeen names on an indictment is not a metaphor. It is a roster. The regime wanted the files without the embargo.
Ask every university that still calls Iranian 'research partners' a bridge: if the theft started in 2013, how many dissertations walked out the side door?
Comments
Cyber theft is a weapons program with a keyboard. Treat it like one.
Indict, seize, and sanction the institute. Do not 'engage' it.
Allied labs should assume Iranian 'students' are collection platforms until proven otherwise.
Campus grant offices hate this story because it makes their MOUs look naive.
I patch servers so a foreign service cannot clock in. Keep charging.
If they can steal a lab, they can steal a hospital. Close the accounts.
Iran's missile file and Iran's theft file are the same war. One is louder.
Examiner named Mabna and 2013. That is the spine of the piece.
Hack-back authority, asset freezes, and campus bans. Harden the research border.