Key facts
- The U.S. Justice Department is collaborating with X to identify perpetrators of a cyberattack.
- The attack targeted hundreds of thousands of X users through a password-recovery attempt.
- U.S. Attorney General Todd Blanche confirmed the attack was disrupted by X.
- Seventeen Iranians have been charged in connection with a multiyear cyber theft campaign.
- The charged individuals are allegedly linked to the Iran-based Mabna Institute.
- The group is accused of stealing over 31 terabytes of data from universities, companies, and government agencies.
The U.S. Justice Department is actively investigating and pursuing individuals responsible for an attempted password-recovery attack that targeted hundreds of thousands of users on Elon Musk's social media platform, X. U.S. Attorney General Todd Blanche confirmed the department's collaboration with X to track down the perpetrators, describing them as "sophisticated cyber criminals" whose efforts were ultimately disrupted by the platform.
This development comes as companies globally are contending with an increase in AI-driven cyberattacks. In response, the White House announced in July the formation of a coordination group involving AI developers and critical infrastructure operators to share information on cybersecurity vulnerabilities identified by AI systems.
Separately, the Justice Department unsealed a superseding indictment charging 17 Iranians associated with the Mabna Institute, an Iran-based entity. Prosecutors allege that since at least 2013, the Mabna Institute has engaged in a coordinated campaign of cyber intrusions targeting numerous institutions. The indictment details alleged hacks into 144 U.S. universities, 178 foreign universities, 42 U.S. private sector companies, 11 foreign private sector companies, five U.S. federal and state government agencies, and two non-governmental organizations. The group is accused of stealing over 31 terabytes of academic data and intellectual property, as well as email accounts, often on behalf of the Islamic Republic of Iran’s Islamic Revolutionary Guard Corps (IRGC) and other Iranian clients. U.S. Attorney Jamie McDonald emphasized that the charges reveal a broader state-sponsored effort to steal research and intellectual property, stating that the passage of time will not deter the pursuit of accountability for those who target the United States from abroad.