U.S. Charges 17 Iranian Hackers for Extortion Campaign Involving Bitcoin

The Charges and Scope

Federal prosecutors charged 17 alleged members of the Mabna Institute, an Iran-based hacking group, with conducting a coordinated campaign to breach hundreds of organizations across the United States and other countries. The targets included academic institutions, private companies, and government agencies. Court filings detail a sophisticated operation spanning multiple years in which the defendants allegedly stole sensitive data, then demanded payment in Bitcoin to prevent its release.

The Bitcoin Extortion Component

The group extracted at least $6 million in Bitcoin from victims through extortion demands, according to charging documents. The use of cryptocurrency allowed the attackers to receive payments across borders while maintaining a degree of anonymity. Federal authorities are offering a $10 million reward for information leading to the arrest or conviction of the defendants.

Attribution and Next Steps

The charges represent a rare public U.S. prosecution naming Iranian state-linked hackers on cyber-extortion charges. None of the 17 defendants are believed to be in U.S. custody, and their actual location remains unclear. The case underscores the overlap between state-sponsored cyber espionage and financially motivated cybercrime, a pattern security researchers have documented for years.