Iranian National Accused of Hacking Hundreds of Organizations Extradited to US

Summary
A dual Iranian-Turkish national accused of cyberattacks on hundreds of organizations was extradited from Montenegro to the US to face charges tied to the Mabna Institute.
Key points
- Montenegrin authorities arrested the suspect on June 25 under an FBI warrant and extradited him to the US.
- A US indictment accuses 17 Mabna Institute members of hacking activities targeting organizations in the US and abroad.
- The indictment alleges attacks against 144 US universities, 178 foreign universities, 42 US companies, 11 foreign companies, five US government agencies, and at least two NGOs.
- The alleged intrusions stole more than 31 terabytes of scientific data, intellectual property, and employee email accounts.
- The US alleges the stolen information was shared with the Iranian government and sold to Iranian universities.
- The suspect is accused of conducting attacks on behalf of the IRGC and private organizations; the extradition is described as rare for an Iranian state-linked hacker.
Article Details
- Event Type
- Extradition of an alleged Iranian state-linked hacker to the United States to face charges related to cyberattacks.
- Impact
- The alleged attacks caused more than $3.4 billion in losses. The indictment says the suspects targeted universities, private companies, government agencies, and NGOs, and stole more than 31 terabytes of scientific resources, intellectual property, and employee email data. It alleges the stolen information was provided to the Iranian government and sold to Iranian universities.
People
Threat Actors
BallojehOne of five Iranian hackers for whom the US government is offering a reward; the article does not provide further identifying details.FayazOne of five Iranian hackers for whom the US government is offering a reward; the article does not provide further identifying details.GalekuhiOne of five Iranian hackers for whom the US government is offering a reward; the article does not provide further identifying details.Islamic Revolutionary Guard Corps (IRGC)The indictment alleges that Amir Barati performed intrusions on behalf of the IRGC.KahzadianOne of five Iranian hackers for whom the US government is offering a reward; the article does not provide further identifying details.Mabna InstituteThe Iran-based company whose 17 members were charged in a US indictment with hacking activities targeting entities in the US and abroad.MesriOne of five Iranian hackers for whom the US government is offering a reward; the article does not provide further identifying details.
Countries
IranActing on an arrest warrant issued by the FBI, Montenegrin authorities arrested the individual, a dual citizen of Turkey and Iran, on June 25.MontenegroAn Iranian national indicted in the US for hacking hundreds of organizations was extradited from Montenegro this week.TurkeyActing on an arrest warrant issued by the FBI, Montenegrin authorities arrested the individual, a dual citizen of Turkey and Iran, on June 25.