coldbraid

Silent Librarian

Silent Librarian is a group that has targeted research and proprietary data at universities, government agencies, and private sector companies worldwide since at least 2013. Members of Silent Librarian are known to have been affiliated with the Iran-based Mabna Institute which has conducted cyber intrusions at the behest of the government of Iran, specifically the Islamic Revolutionary Guard Corps (IRGC).

ATT&CK ID
G0122
Origin
Iran
Techniques
10
Tools
0

Also tracked as TA407 · COBALT DICKENS

Techniques

Reconnaissance

Gather Victim Identity InformationSearch Victim-Owned WebsitesPhishing for Information

Resource Development

Acquire InfrastructureEstablish AccountsObtain CapabilitiesStage Capabilities

Initial Access

Valid Accounts

Persistence

Valid Accounts

Privilege Escalation

Valid Accounts

Stealth

Valid Accounts

Credential Access

Brute Force

Collection

Email Collection