US expands charges against Iranians over massive hacking campaign

US authorities have expanded their prosecution of an alleged Iranian hacking network, bringing the total number of indicted suspects to 17 over a campaign targeting universities, companies and government agencies.

The US Department of Justice announced a new indictment against eight additional individuals, while nine suspects had already been indicted in 2018.

Prosecutors are offering a $10 million reward for information leading to the prosecution of five of the suspects — Behzad Mesri, Mojtaba Galekuhi, Arman Kahzadian, Keyvan Fayaz and Saber Shahbazi Ballojeh.

The suspects are linked to Iran-based Mabna Institute, which prosecutors allege conducted hacking operations on behalf of the Iranian government and the Islamic Revolutionary Guard Corps.

The campaign, which mainly ran from 2013 to 2017, allegedly focused on stealing scientific research and intellectual property. The expanded case covers attacks on 144 US universities, 178 foreign universities, at least 42 US companies, 11 foreign firms, five US government agencies and two NGOs.

More than 100,000 professor accounts were reportedly targeted, with hackers allegedly stealing around 31.5 terabytes of data, including scientific papers, dissertations and other research material.

“More than eight years after making the original indictment public, these charges make clear that the passage of time will not deter us from identifying and pursuing those who target the United States from abroad,” US Attorney Jamie McDonald said.

In 2018, the US Treasury imposed sanctions on the nine initially indicted suspects, along with a 10th individual accused of attempting to extort HBO after stealing the script of an unaired episode of Game of Thrones.