Silent Librarian

Overview

Silent Librarian is a group that has targeted research and proprietary data at universities, government agencies, and private sector companies worldwide since at least 2013. Members of Silent Librarian are known to have been affiliated with the Iran-based Mabna Institute which has conducted cyber intrusions at the behest of the government of Iran, specifically the Islamic Revolutionary Guard Corps (IRGC).

TTPs — 13 techniques across 5 tactics

Reporting (3)

• Silent Librarian APT right on schedule for 20/21 academic year — Malwarebytes Threat Intelligence Team
• COBALT DICKENS Goes Back to School…Again — Counter Threat Unit Research Team
• Threat Actor Profile: TA407, the Silent Librarian — Proofpoint Threat Insight Team