Uptime Hamster: 112d 15h 56mDeploy: 23 Oct 2026 07:21Updated: 2026-07-21
Logo del actor de amenaza COBALT DICKENS

COBALT DICKENS

0 incidentes 0 paises 0 sectores apt IR Ultimo: -
Aliases: Silent Librarian, Mabna Institute, TA407, TA4900, Yellow Nabu, cobalt dickens, mabna institute, silent librarian, ta407
Ver en IntelTracker → APTTrail →
COBALT DICKENS, also known by aliases such as Silent Librarian, Mabna Institute, and TA407, is an Iranian state-sponsored advanced persistent threat group that emerged around 2013. The group primarily focuses on cyber espionage campaigns, specifically targeting academic institutions globally to steal intellectual property and academic research. They operate under the guise of the Mabna Institute, which was founded to facilitate access to non-Iranian scientific resources for Iranian entities. What sets this group apart is its consistent methodology over many years: they are not driven by financial gain in the typical criminal sense but rather by the strategic acquisition of academic data to support the Iranian government and universities, often selling the stolen information directly to these entities. Despite indictments and public disclosures, the group has shown remarkable persistence, often resuming operations with similar tactics.

Aliases del actor

Silent LibrarianMabna InstituteTA407TA4900Yellow Nabucobalt dickensmabna institutesilent librarianta407

Actores similares

silent-librarianactor · 1cobalt-dickensactor · 1Silent Librarianthreat-actor · 1silentransomgroupactor · 36SilentRansomGroupthreat-actor · 2silentthreat-actor · 2cobalt-spideractor · 1Cobalt Groupthreat-actor · 1Cobaltapt · 0Silent Chollimaapt · 0

Canales, DLS e infraestructura asociada

Clasificacion automatica desde IntelTracker/APTTrail/OSINT. Estado real solo si viene indicado por la fuente.

TipoEstadoHost / enlaceTitle / ultimo titulo
DLS / leak siteunknownblog.malwarebytes.comcobalt dickens indicators and references
DLS / leak siteunknownotx.alienvault.comcobalt dickens indicators and references
DLS / leak siteunknownotx.alienvault.comcobalt dickens indicators and references
X/Twitterunknowntwitter.comcobalt dickens indicators and references
X/Twitterunknowntwitter.comcobalt dickens indicators and references
X/Twitterunknowntwitter.comcobalt dickens indicators and references
X/Twitterunknowntwitter.comcobalt dickens indicators and references
X/Twitterunknowntwitter.comcobalt dickens indicators and references
X/Twitterunknowntwitter.comcobalt dickens indicators and references
X/Twitterunknowntwitter.comcobalt dickens indicators and references
X/Twitterunknowntwitter.comcobalt dickens indicators and references
Repositoriounknowngithub.comcobalt dickens indicators and references
DLS / leak siteunknownraw.githubusercontent.comcobalt dickens indicators and references
X/Twitterunknowntwitter.comcobalt dickens indicators and references
X/Twitterunknowntwitter.comcobalt dickens indicators and references
X/Twitterunknowntwitter.comcobalt dickens indicators and references
X/Twitterunknowntwitter.comcobalt dickens indicators and references
X/Twitterunknowntwitter.comcobalt dickens indicators and references
X/Twitterunknowntwitter.comcobalt dickens indicators and references
X/Twitterunknowntwitter.comcobalt dickens indicators and references
X/Twitterunknownblog.malwarebytes.comcobalt dickens indicators and references
Motivacion
Information theft and espionage
Tecnicas MITRE
T1078, T1588.002, T1110.003, T1071.001, T1589, T1608
Tipo
apt
Pais origen
IR
Motivacion
Information theft and espionage
Impacto
28
Actualizado
Wed, 01 Ju

Paises objetivo (OSINT)

AustraliaCanadaSwitzerlandChinaHong KongIsraelJapanTurkeyUnited States

Sectores objetivo (OSINT)

Educational ServicesPublic AdministrationInternet PublishingColleges, Universities, and Professional SchoolsEducational Support ServicesData Processing, Hosting, and Related ServicesShip Building and RepairingComputer Systems Design Services