Opening Forensia workspaceacquiring
Loading the current evidence view. Navigation and account controls remain available.
Loading recent evidenceacquiring
Threat actors
Loading the current evidence view. Navigation and account controls remain available.
Also known as: TA407, COBALT DICKENS
13
techniques
0
software
2,404
corpus matches
profile
Silent Librarian is a group that has targeted research and proprietary data at universities, government agencies, and private sector companies worldwide since at least 2013. Members of Silent Librarian are known to have been affiliated with the Iran-based Mabna Institute which has conducted cyber intrusions at the behest of the government of Iran, specifically the Islamic Revolutionary Guard Corps (IRGC).
read this carefully
2,404 corpus matches is not attribution
That count is indicators which exhibit techniques Silent Librarian is known to use. Many unrelated operators use the same techniques. Treat it as a shared-technique signal for hunting, never as first-party attribution to this group.
indicators exhibiting these techniques
Top by severity: each resolves to its own verdict.
reconnaissance
+1 more techniques
showing 30 of 2,404
known aliases
Vendors name the same group differently. Searching any alias reaches this profile.