{"id":1254,"date":"2018-03-24T17:22:11","date_gmt":"2018-03-24T17:22:11","guid":{"rendered":"http:\/\/www.iransos.com\/en\/?p=1254"},"modified":"2020-02-06T14:55:28","modified_gmt":"2020-02-06T14:55:28","slug":"massive-cyberhack-by-iran-allegedly-stole-research-from-320-universities-governments-and-companies","status":"publish","type":"post","link":"https:\/\/www.iransos.com\/en\/?p=1254","title":{"rendered":"Massive cyberhack by Iran allegedly stole research from 320 universities, governments, and companies"},"content":{"rendered":"

Science – By\u00a0Jon Cohen –\u00a0<\/strong><\/a>Mar. 23, 2018 – Nine Iranians working on behalf of the Islamic Revolutionary Guard Corps hacked the computers of 7998 professors at 320 universities around the world over the past 5 years,\u00a0an indictment filed by a federal grand jury<\/strong><\/a>\u00a0alleges. The hackers stole 31.5 terabytes of documents and data, including scientific research, journals, and dissertations, the indictment alleges. Their targets also included the United Nations, 30 U.S.\u00a0companies, and five U.S. government agencies.<\/p>\n

The \u201cmassive and brazen cyber assault\u201d is \u201cone of the largest state-sponsored hacking campaigns ever prosecuted by the Department of Justice,\u201d U.S. Attorney Geoffrey Berman of the Southern District of New York, where the indictment was filed, said at a\u00a0press conference<\/strong><\/a>\u00a0this morning. The hacks came to light through investigations by the Federal Bureau of Investigation\u00a0and reports from victims. \u201cThe hackers targeted innovations and intellectual property from our country\u2019s greatest minds,\u201d Berman said, adding that they went after data and research from many fields.<\/p>\n

According to the indictment, 3768 of the hacked professors were at 144 U.S. universities, and the attackers stole data that cost these institutions about $3.4 billion to \u201cprocure and access.\u201d The accused allegedly set up an institute in Iran called Mabna that coordinated and paid for the hacks. The defendants then sold the stolen data through two websites, Gigapaper and Megapaper. The institute, the indictment says, aimed to \u201cassist Iranian universities, as well as scientific and research organizations, to obtain access to non-Iranian scientific resources.\u201d<\/p>\n

The indictment does not name academic institutions or companies that were hacked, but does specify that victims included academic publishers, a biotechnology company, and 11 technology companies.<\/p>\n

The indictment offers more detail about government breaches, noting that hacks in the United States\u00a0occurred in the states of Hawaii and Indiana, as well as at the Federal Energy Regulatory Commission and Department of Labor, both in Washington, D.C. The defendants also allegedly hacked the United Nations Children\u2019s Fund. Other countries targeted include\u00a0Australia, Canada, China, Denmark, Finland, Germany, Ireland, Israel, Italy, Japan, Malaysia, the Netherlands, Norway, Poland, Singapore, South Korea, Spain, Sweden, Switzerland, Turkey, and the United Kingdom.<\/p>\n

A wanted poster depicting the alleged Iranian hackers FEDERAL BUREAU OF INVESTIGATION<\/p><\/div>\n

The charges against the accused include wire fraud, aggravated identity theft, and conspiracy to commit computer intrusions. The indictment says the university breaches involved \u201cspearfishing,\u201d in which the accused sent emails to targets that tricked them into providing their login credentials. The emails supposedly came from professors who read articles by the targets and asked to see more of their work, providing links. A click on the link took the victim to a fake internet domain that resembled their own university\u2019s website and asked them to log in. For the private sector, the indictment says hackers used \u201cpassword spraying,\u201d cracking into accounts with commonly used passwords; then they \u201cexfiltrated entire email mailboxes from the victims\u201d and also captured new outgoing and incoming email from compromised individuals.<\/p>\n

Berman said all nine defendants are now believed to be in Iran. \u201cThese defendants are no longer free to travel outside of Iran without the fear of being arrested and extradited to the United States,\u201d Berman said. \u201cThe only way they can see the rest of the world is\u00a0through\u00a0their computer screen, but not stripped of their greatest asset, anonymity.\u201d<\/p>\n

Posted in:<\/p>\n

    \n
  • Scientific Communit<\/strong><\/li>\n<\/ul>\n

    doi:10.1126\/science.aat684<\/p>\n

    \n","protected":false},"excerpt":{"rendered":"

    Science – By\u00a0Jon Cohen –\u00a0Mar. 23, 2018 – Nine Iranians working on behalf of the Islamic Revolutionary Guard Corps hacked the computers of 7998 professors at 320 universities around the<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[61],"tags":[396,395,308,243,292],"class_list":["post-1254","post","type-post","status-publish","format-standard","hentry","category-news","tag-cyber","tag-cyberhack","tag-irans-revolutionary-guard-corps","tag-irans-revolutionary-guards","tag-islamic-revolutionary-guard-corps"],"_links":{"self":[{"href":"https:\/\/www.iransos.com\/en\/index.php?rest_route=\/wp\/v2\/posts\/1254","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.iransos.com\/en\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.iransos.com\/en\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.iransos.com\/en\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.iransos.com\/en\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1254"}],"version-history":[{"count":2,"href":"https:\/\/www.iransos.com\/en\/index.php?rest_route=\/wp\/v2\/posts\/1254\/revisions"}],"predecessor-version":[{"id":1539,"href":"https:\/\/www.iransos.com\/en\/index.php?rest_route=\/wp\/v2\/posts\/1254\/revisions\/1539"}],"wp:attachment":[{"href":"https:\/\/www.iransos.com\/en\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1254"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.iransos.com\/en\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1254"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.iransos.com\/en\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1254"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}