U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches
Summary: The U.S. Treasury sanctioned nearly 60 Iran-linked entities, individuals, and vessels under Operation Economic Outcast, including a MOIS-affiliated cyber group blamed for breaching U.S. critical infrastructure and for financially motivated theft. Five sanctioned individuals were indicted last week as alleged members of the Tehran-based Mabna Institute, accused of breaching energy companies, defense contractors, healthcare institutions, IT companies, and financial institutions since at least late 2023.
What's compelling: TRM Labs traced about $16.8 million in funds across 30 wallets tied to the five Mabna Institute members, with one individual's 10 addresses accounting for 92% of the network's on-chain volume - the same group Treasury says breached critical infrastructure while its members prioritized personal profit over MOIS tasking.
Read the original at The Hacker News ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026