US Charges 17 Iranian Hackers, Offers $10 Million for Information Leading to Arrests

US officials have filed charges against 17 people connected to the Mabna Institute, an Iran-based group accused of targeting hundreds of universities and other organisations across the United States and internationally. The case highlights the scale and persistence of state-linked hacking operations that continue to threaten research institutions, businesses, and government bodies worldwide.

As part of the response, the US government is offering rewards of up to $10 million for information leading to the identification or location of five of the named individuals. While large multinational institutions were the primary targets, this case is a reminder that state-linked hacking groups often exploit widely used systems and credentials—the same weaknesses that can affect smaller organisations connected to larger supply chains or academic networks.

For Australian small businesses, the takeaway isn't that they're direct targets of nation-state actors, but that the tactics used—credential theft, phishing, and exploitation of weak access controls—are common across all levels of cybercrime. Understanding how these large-scale attacks unfold can help smaller organisations recognise similar warning signs in their own systems.