Also known as: TA407, COBALT DICKENS, Silent Librarian, Mabna Institute, TA4900, Yellow Nabu, Mabna Institute Group
Silent Librarian is a group that has targeted research and proprietary data at universities, government agencies, and private sector companies worldwide since at least 2013. Members of Silent Librarian are known to have been affiliated with the Iran-based Mabna Institute which has conducted cyber intrusions at the behest of the government of Iran, specifically the Islamic Revolutionary Guard Corps (IRGC).(Citation: DOJ Iran Indictments March 2018)(Citation: Phish Labs Silent Librarian)(Citation: Malwarebytes Silent Librarian October 2020)
Targeted Sectors
Targeted Countries / Regions
Executive Summary
Silent Librarian, also known as TA407, COBALT DICKENS, Mabna Institute Group, and Yellow Nabu, is a state-sponsored advanced persistent threat (APT) group linked to cyber espionage activities targeting research institutions, government agencies, and private companies. The group has been active since at least 2013 and is suspected to be associated with the Islamic Revolutionary Guard Corps (IRGC) based in Iran.
Goals & Targeting
Silent Librarian's strategic goals appear to be centered around collecting sensitive information and intellectual property from targeted sectors such as government and academia. Their targeting profile suggests a focus on countries with significant research and development capabilities, particularly the US. The group's activities align with broader Iranian interests in gaining economic and military advantages through cyber espionage.
Enhanced Description
Silent Librarian has consistently focused on infiltrating organizations to collect sensitive data, intellectual property, and research findings. Their activities have primarily targeted universities, government entities, and private sector companies across various countries, including the United States. The group is known for leveraging sophisticated tactics to achieve their objectives while maintaining a low profile. They are associated with the Mabna Institute, an Iranian entity that has been implicated in numerous cyber espionage campaigns on behalf of the IRGC.
Key Capabilities
No tools linked yet.
No campaigns linked yet.
No observed data linked yet.
No IOCs linked yet.
13
Techniques
0
Tools
0
Campaigns
0
IOCs
0
Observed Data
5
Tactics