Silent Librarian — APT Profile
Silent Librarian is a group that has targeted research and proprietary data at universities, government agencies, and private sector companies worldwide since at least 2013. Members of Silent Librarian are known to have been affiliated with the Iran-based Mabna Institute which has conducted cyber intrusions at the behest of the government of Iran, specifically the Islamic Revolutionary Guard Corps (IRGC).Description reproduced from MITRE ATT&CK. © The MITRE Corporation, reproduced and distributed with permission.
Also tracked as
TA407, COBALT DICKENS, Mabna Institute, TA4900, Yellow Nabu, Mabna Institute Group
Vendor research
- Silent Librarian APT right on schedule for 20/21 academic year Malwarebytes Threat Intelligence Team
- Back to School: COBALT DICKENS Targets Universities Counter Threat Unit Research Team
- COBALT DICKENS Goes Back to School…Again Counter Threat Unit Research Team
- Silent Librarian APT right on schedule for 20/21 academic year Malwarebytes
- U.S. v. Rafatnejad et al DOJ
- COBALT DICKENS Goes Back to School…Again Secureworks
- Back to School: COBALT DICKENS Targets Universities Secureworks
- Silent Librarian: More to the Story of the Iranian Mabna Institute Indictment Phish Labs
- Threat Actor Profile: TA407, the Silent Librarian Proofpoint