U.S. ‘names and shames’ Iranians for hacking
WA SH I NG T ON • The Trump administration announced criminal charges and sanctions Friday against Iranians accused in a governmentsponsored hacking scheme to pilfer sensitive information from hundreds of universities, private companies and American government agencies.
The nine defendants, accused of working at the behest of the Iranian government- tied Islamic Revolutionary Guard Corps, hacked the computer systems of about 320 universities in the United States and abroad to steal expensive science and engineering research that was then used by the government or sold for profit, prosecutors said.
The hackers also are accused of breaking into the networks of government organizations, such as the Department of Labor and the Federal Energy Regulatory Commission, the United Nations and companies including law firms and biotechnology corporations.
The Justice Department said the hackers were affiliated with an Iranian company called the Mabna Institute, which prosecutors say contracted with the Iranian government to steal scientific research from other countries. The institute was founded by two of the defendants.
“By bringing these criminal charges, we reinforce the norm that most of the civilized world accepts: nation- states should not steal intellectual property for the purpose of giving domestic industries an advantage,” Deputy Attorney General Rod Rosenstein said in announcing the charges.
Also Friday, the Treasury Department targeted the Mabna Institute and 10 Iranians — the nine defendants and one charged in a separate case last year — for sanctions that officials say will make it harder for them to do business outside Iran.
The defendants are unlikely to ever be prosecuted in an American courtroom since there’s no extradition treaty with Iran. But the grand jury indictment — filed in federal court in Manhattan — is part of the government’s “name and shame” strategy to publicly i dentify foreign hackers, block them from travelling without risk of arrest and put their countries on notice.
The strategy has been employed with past indictments acc using Iranian hackers of a digital break- in of a New York dam, Chinese military officials of largescale hacks at energy corporations and Russians of a massive breach of Yahoo user accounts.
“People travel. They take vacations, they make plans with their families,” said FBI deputy director David Bowdich. “Having your name, face and description on a ‘ wanted’ poster makes moving freely much more difficult.”
According to the indictment, the Iranians broke into universities through relatively simple, but common means — tricking professors to click on compromised links.