US charges 17 Iranians in Mabna Institute $3.4B IP theft scheme

Thu, 20 Aug 2026 11:39:11 +0000

Engineer — Skip
SOC/IR — Learn: Mabna Institute TTPs focused on credential-based intrusions targeting research and academic institutions; useful for contextualizing Iranian threat actor tradecraft but no new IOCs or detections surface from this indictment alone.
Leader — Learn: Attribution and scale of Iranian hacking-for-hire operations are useful framing for board-level risk conversations about nation-state IP theft, but no immediate action is required without corroborating exposure signals.

Ip-Theft on CuraSec