Silent Librarian
Also reported as TA407, COBALT DICKENS, Mabna Institute, Yellow Nabu, TA4900 and 3 other names. Linked to Iran by three sources.
Reports per quarter
Techniques in ATT&CK
Listed by ATT&CK
Show all 13 techniques Show fewer
No report from the last two years names a technique ID.
CVEs named in reports
- CVE-2018-0802 KEV ransomware
- CVE-2019-0708 KEV ransomware
- CVE-2019-1182
- CVE-2019-16759 KEV
- CVE-2019-5840
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
Mabna Institute, Cobalt Dickens, Silent Librarian
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Mabna Institute, Cobalt Dickens, Silent Librarian
-
The blurry boundaries between nation-state actors and the cybercrime underground
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor The blurry boundaries between nation-state actors and the cybercrime underground
-
‘Shadow Academy’ Targets 20 Universities Worldwide
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor ‘Shadow Academy’ Targets 20 Universities Worldwide
-
An Investigative Analysis of the Silent Librarian IoCs
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor An Investigative Analysis of the Silent Librarian IoCs
-
Fake COVID-19 survey hides ransomware in Canadian university attack
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Fake COVID-19 survey hides ransomware in Canadian university attack
Show all 31 reports Show fewer
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Silent Librarian APT right on schedule for 20_21 academic year - Malwarebytes Labs _ Malwarebytes Labs
-
Silent Librarian APT right on schedule for 20-21 academic year
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Silent Librarian APT right on schedule for 20-21 academic year
-
Silent Librarian APT right on schedule for 2021 academic year
The original link failed its last check. Detailsfor Silent Librarian APT right on schedule for 2021 academic year
-
cybersecurity-threatscape-2019-q3-eng
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor cybersecurity-threatscape-2019-q3-eng
-
Threat Actor Profile- TA407, the Silent Librarian
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Threat Actor Profile- TA407, the Silent Librarian
-
COBALT DICKENS Goes Back to School…Again
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor COBALT DICKENS Goes Back to School…Again
-
Seems Phishy- Back to School Lures Target University Students and Staff
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Seems Phishy- Back to School Lures Target University Students and Staff
-
Supply Chain – The Major Target of Cyberespionage Groups
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Supply Chain – The Major Target of Cyberespionage Groups
-
Iranian Hackers Charged in March Are Still Actively Phishing Universities
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Iranian Hackers Charged in March Are Still Actively Phishing Universities
-
Cobalt Dickens threat group looks to be similar to indicted hackers
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Cobalt Dickens threat group looks to be similar to indicted hackers
-
Back to School- COBALT DICKENS Targets Universities
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Back to School- COBALT DICKENS Targets Universities
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor cta-2018-0509
-
Silent Librarian University Attacks Continue Unabated in Days Following Indictment
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Silent Librarian University Attacks Continue Unabated in Days Following Indictment
-
Silent Librarian- More to the Story of the Iranian Mabna Institute Indictment
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Silent Librarian- More to the Story of the Iranian Mabna Institute Indictment
-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Nine Iranians Charged With Conducting Massive Cyber Theft Campaign on Behalf of the Islamic Revolutionary Guard Corps
Newest first. Details opens the report in Explore.